xnu/security/mac_framework.h

141 #define mac_task_label_update_cred(cred, task)				\
142         mac_task_label_update_internal(((cred)->cr_label), task)
144 #define mac_task_label_update_cred(cred, task)
148 int	mac_audit_check_postselect(kauth_cred_t cred, unsigned short syscode,
150 int	mac_audit_check_preselect(kauth_cred_t cred, unsigned short syscode,
155 void	mac_bpfdesc_label_associate(kauth_cred_t cred, struct bpf_d *bpf_d);
156 int	mac_cred_check_label_update(kauth_cred_t cred,
165 void	mac_cred_label_associate_fork(kauth_cred_t cred, proc_t child);
166 void	mac_cred_label_associate_kernel(kauth_cred_t cred);
167 void	mac_cred_label_associate_user(kauth_cred_t cred);
168 void	mac_cred_label_destroy(kauth_cred_t cred);
171 void	mac_cred_label_init(kauth_cred_t cred);
173 void	mac_cred_label_update(kauth_cred_t cred, struct label *newlabel);
187 int	mac_file_check_change_offset(kauth_cred_t cred, struct fileglob *fg);
188 int	mac_file_check_create(kauth_cred_t cred);
189 int	mac_file_check_dup(kauth_cred_t cred, struct fileglob *fg, int newfd);
190 int	mac_file_check_fcntl(kauth_cred_t cred, struct fileglob *fg, int cmd,
192 int	mac_file_check_get(kauth_cred_t cred, struct fileglob *fg,
194 int	mac_file_check_get_offset(kauth_cred_t cred, struct fileglob *fg);
195 int	mac_file_check_inherit(kauth_cred_t cred, struct fileglob *fg);
196 int	mac_file_check_ioctl(kauth_cred_t cred, struct fileglob *fg,
198 int	mac_file_check_lock(kauth_cred_t cred, struct fileglob *fg, int op,
200 int	mac_file_check_mmap(kauth_cred_t cred, struct fileglob *fg,
202 void	mac_file_check_mmap_downgrade(kauth_cred_t cred, struct fileglob *fg,
204 int	mac_file_check_receive(kauth_cred_t cred, struct fileglob *fg);
205 int	mac_file_check_set(kauth_cred_t cred, struct fileglob *fg,
207 void	mac_file_label_associate(kauth_cred_t cred, struct fileglob *fg);
214 int	mac_ifnet_label_get(kauth_cred_t cred, struct ifreq *ifr,
218 int	mac_ifnet_label_set(kauth_cred_t cred, struct ifreq *ifr,
228 int	mac_iokit_check_open(kauth_cred_t cred, io_object_t user_client, unsigned int user_client_type);
229 int	mac_iokit_check_set_properties(kauth_cred_t cred, io_object_t registry_entry, io_object_t properties);
230 int	mac_iokit_check_hid_control(kauth_cred_t cred);
281 int	mac_pipe_check_ioctl(kauth_cred_t cred, struct pipe *cpipe,
283 int	mac_pipe_check_kqfilter(kauth_cred_t cred, struct knote *kn,
285 int	mac_pipe_check_read(kauth_cred_t cred, struct pipe *cpipe);
286 int	mac_pipe_check_select(kauth_cred_t cred, struct pipe *cpipe,
288 int	mac_pipe_check_stat(kauth_cred_t cred, struct pipe *cpipe);
289 int	mac_pipe_check_write(kauth_cred_t cred, struct pipe *cpipe);
291 void	mac_pipe_label_associate(kauth_cred_t cred, struct pipe *cpipe);
296 int	mac_pipe_label_update(kauth_cred_t cred, struct pipe *cpipe,
299 int	mac_posixsem_check_create(kauth_cred_t cred, const char *name);
300 int	mac_posixsem_check_open(kauth_cred_t cred, struct pseminfo *psem);
301 int	mac_posixsem_check_post(kauth_cred_t cred, struct pseminfo *psem);
302 int	mac_posixsem_check_unlink(kauth_cred_t cred, struct pseminfo *psem,
304 int	mac_posixsem_check_wait(kauth_cred_t cred, struct pseminfo *psem);
305 void	mac_posixsem_vnode_label_associate(kauth_cred_t cred,
308 void	mac_posixsem_label_associate(kauth_cred_t cred,
312 int	mac_posixshm_check_create(kauth_cred_t cred, const char *name);
313 int	mac_posixshm_check_mmap(kauth_cred_t cred, struct pshminfo *pshm,
315 int	mac_posixshm_check_open(kauth_cred_t cred, struct pshminfo *pshm,
317 int	mac_posixshm_check_stat(kauth_cred_t cred, struct pshminfo *pshm);
318 int	mac_posixshm_check_truncate(kauth_cred_t cred, struct pshminfo *pshm,
320 int	mac_posixshm_check_unlink(kauth_cred_t cred, struct pshminfo *pshm,
322 void	mac_posixshm_vnode_label_associate(kauth_cred_t cred,
325 void	mac_posixshm_label_associate(kauth_cred_t cred,
329 int	mac_priv_check(kauth_cred_t cred, int priv);
330 int	mac_priv_grant(kauth_cred_t cred, int priv);
334 int	mac_proc_check_get_task_name(kauth_cred_t cred, struct proc *p);
335 int	mac_proc_check_get_task(kauth_cred_t cred, struct proc *p);
355 int	mac_setsockopt_label(kauth_cred_t cred, struct socket *so,
357 int     mac_socket_check_accept(kauth_cred_t cred, struct socket *so);
358 int     mac_socket_check_accepted(kauth_cred_t cred, struct socket *so);
359 int	mac_socket_check_bind(kauth_cred_t cred, struct socket *so,
361 int	mac_socket_check_connect(kauth_cred_t cred, struct socket *so,
363 int	mac_socket_check_create(kauth_cred_t cred, int domain,
366 int	mac_socket_check_kqfilter(kauth_cred_t cred, struct knote *kn,
368 int	mac_socket_check_listen(kauth_cred_t cred, struct socket *so);
369 int	mac_socket_check_receive(kauth_cred_t cred, struct socket *so);
370 int	mac_socket_check_received(kauth_cred_t cred, struct socket *so,
372 int     mac_socket_check_select(kauth_cred_t cred, struct socket *so,
374 int	mac_socket_check_send(kauth_cred_t cred, struct socket *so,
376 int	mac_socket_check_getsockopt(kauth_cred_t cred, struct socket *so,
378 int	mac_socket_check_setsockopt(kauth_cred_t cred, struct socket *so,
380 int	mac_socket_check_stat(kauth_cred_t cred, struct socket *so);
381 void	mac_socket_label_associate(kauth_cred_t cred, struct socket *so);
386 int	mac_socket_label_get(kauth_cred_t cred, struct socket *so,
392 int	mac_socketpeer_label_get(kauth_cred_t cred, struct socket *so,
394 int	mac_system_check_acct(kauth_cred_t cred, struct vnode *vp);
395 int	mac_system_check_audit(kauth_cred_t cred, void *record, int length);
396 int	mac_system_check_auditctl(kauth_cred_t cred, struct vnode *vp);
397 int	mac_system_check_auditon(kauth_cred_t cred, int cmd);
398 int	mac_system_check_chud(kauth_cred_t cred);
399 int	mac_system_check_host_priv(kauth_cred_t cred);
400 int	mac_system_check_nfsd(kauth_cred_t cred);
401 int	mac_system_check_reboot(kauth_cred_t cred, int howto);
402 int	mac_system_check_settime(kauth_cred_t cred);
403 int	mac_system_check_swapoff(kauth_cred_t cred, struct vnode *vp);
404 int	mac_system_check_swapon(kauth_cred_t cred, struct vnode *vp);
405 int	mac_system_check_sysctl(kauth_cred_t cred, int *name,
408 int	mac_system_check_kas_info(kauth_cred_t cred, int selector);
409 void	mac_sysvmsg_label_associate(kauth_cred_t cred,
413 int	mac_sysvmsq_check_enqueue(kauth_cred_t cred, struct msg *msgptr,
415 int	mac_sysvmsq_check_msgrcv(kauth_cred_t cred, struct msg *msgptr);
416 int	mac_sysvmsq_check_msgrmid(kauth_cred_t cred, struct msg *msgptr);
417 int	mac_sysvmsq_check_msqctl(kauth_cred_t cred,
419 int	mac_sysvmsq_check_msqget(kauth_cred_t cred,
421 int	mac_sysvmsq_check_msqrcv(kauth_cred_t cred,
423 int	mac_sysvmsq_check_msqsnd(kauth_cred_t cred,
425 void	mac_sysvmsq_label_associate(kauth_cred_t cred,
429 int	mac_sysvsem_check_semctl(kauth_cred_t cred,
431 int	mac_sysvsem_check_semget(kauth_cred_t cred,
433 int	mac_sysvsem_check_semop(kauth_cred_t cred,
435 void	mac_sysvsem_label_associate(kauth_cred_t cred,
440 int	mac_sysvshm_check_shmat(kauth_cred_t cred,
442 int	mac_sysvshm_check_shmctl(kauth_cred_t cred,
444 int	mac_sysvshm_check_shmdt(kauth_cred_t cred,
446 int	mac_sysvshm_check_shmget(kauth_cred_t cred,
448 void	mac_sysvshm_label_associate(kauth_cred_t cred,