xnu/security/mac_framework.h

122 struct vnode;
159 	    struct vnode *vp, struct label *scriptvnodelabel,
175 	    struct vnode *vp, struct label *scriptvnodelabel,
185 	    struct vnode *vp);
264 int	mac_mount_check_mount(vfs_context_t ctx, struct vnode *vp,
394 int	mac_system_check_acct(kauth_cred_t cred, struct vnode *vp);
396 int	mac_system_check_auditctl(kauth_cred_t cred, struct vnode *vp);
403 int	mac_system_check_swapoff(kauth_cred_t cred, struct vnode *vp);
404 int	mac_system_check_swapon(kauth_cred_t cred, struct vnode *vp);
457 int	mac_vnode_check_access(vfs_context_t ctx, struct vnode *vp,
459 int	mac_vnode_check_chdir(vfs_context_t ctx, struct vnode *dvp);
460 int	mac_vnode_check_chroot(vfs_context_t ctx, struct vnode *dvp,
462 int	mac_vnode_check_create(vfs_context_t ctx, struct vnode *dvp,
464 int	mac_vnode_check_deleteextattr(vfs_context_t ctx, struct vnode *vp,
466 int	mac_vnode_check_exchangedata(vfs_context_t ctx, struct vnode *v1,
467 	    struct vnode *v2);
468 int	mac_vnode_check_exec(vfs_context_t ctx, struct vnode *vp,
470 int	mac_vnode_check_fsgetpath(vfs_context_t ctx, struct vnode *vp);
471 int	mac_vnode_check_signature(struct vnode *vp, unsigned char *sha1,
473 int     mac_vnode_check_getattrlist(vfs_context_t ctx, struct vnode *vp,
475 int	mac_vnode_check_getextattr(vfs_context_t ctx, struct vnode *vp,
477 int	mac_vnode_check_ioctl(vfs_context_t ctx, struct vnode *vp,
480 	    kauth_cred_t file_cred, struct knote *kn, struct vnode *vp);
481 int	mac_vnode_check_label_update(vfs_context_t ctx, struct vnode *vp,
483 int	mac_vnode_check_link(vfs_context_t ctx, struct vnode *dvp,
484 	    struct vnode *vp, struct componentname *cnp);
485 int	mac_vnode_check_listextattr(vfs_context_t ctx, struct vnode *vp);
486 int	mac_vnode_check_lookup(vfs_context_t ctx, struct vnode *dvp,
488 int	mac_vnode_check_open(vfs_context_t ctx, struct vnode *vp,
491 	    kauth_cred_t file_cred, struct vnode *vp);
492 int	mac_vnode_check_readdir(vfs_context_t ctx, struct vnode *vp);
493 int	mac_vnode_check_readlink(vfs_context_t ctx, struct vnode *vp);
494 int	mac_vnode_check_rename_from(vfs_context_t ctx, struct vnode *dvp,
495 	    struct vnode *vp, struct componentname *cnp);
496 int	mac_vnode_check_rename_to(vfs_context_t ctx, struct vnode *dvp,
497 	    struct vnode *vp, int samedir, struct componentname *cnp);
498 int	mac_vnode_check_revoke(vfs_context_t ctx, struct vnode *vp);
499 int	mac_vnode_check_searchfs(vfs_context_t ctx, struct vnode *vp,
501 int     mac_vnode_check_select(vfs_context_t ctx, struct vnode *vp,
503 int     mac_vnode_check_setattrlist(vfs_context_t ctxd, struct vnode *vp,
505 int	mac_vnode_check_setextattr(vfs_context_t ctx, struct vnode *vp,
507 int	mac_vnode_check_setflags(vfs_context_t ctx, struct vnode *vp,
509 int	mac_vnode_check_setmode(vfs_context_t ctx, struct vnode *vp,
511 int	mac_vnode_check_setowner(vfs_context_t ctx, struct vnode *vp,
513 int	mac_vnode_check_setutimes(vfs_context_t ctx, struct vnode *vp,
516 	    kauth_cred_t file_cred, struct vnode *vp);
518 	    kauth_cred_t file_cred, struct vnode *vp);
519 int	mac_vnode_check_uipc_bind(vfs_context_t ctx, struct vnode *dvp,
521 int	mac_vnode_check_uipc_connect(vfs_context_t ctx, struct vnode *vp);
522 int	mac_vnode_check_unlink(vfs_context_t ctx, struct vnode *dvp,
523 	    struct vnode *vp, struct componentname *cnp);
525 	    kauth_cred_t file_cred, struct vnode *vp);
527 int	mac_vnode_label_associate(struct mount *mp, struct vnode *vp,
530 	    struct vnode *vp);
531 int	mac_vnode_label_associate_extattr(struct mount *mp, struct vnode *vp);
533 	    struct vnode *vp, vfs_context_t ctx);
535 	    struct vnode *vp);
537 void	mac_vnode_label_destroy(struct vnode *vp);
538 int	mac_vnode_label_externalize_audit(struct vnode *vp, struct mac *mac);
540 void	mac_vnode_label_init(struct vnode *vp);
541 int	mac_vnode_label_init_needed(struct vnode *vp);
542 void	mac_vnode_label_recycle(struct vnode *vp);
543 void	mac_vnode_label_update(vfs_context_t ctx, struct vnode *vp,
545 void	mac_vnode_label_update_extattr(struct mount *mp, struct vnode *vp,
548 	    struct vnode *dvp, struct vnode *vp, struct componentname *cnp);
549 void	mac_vnode_notify_rename(vfs_context_t ctx, struct vnode *vp,
550 	    struct vnode *dvp, struct componentname *cnp);
551 void	mac_vnode_notify_open(vfs_context_t ctx, struct vnode *vp, int acc_flags);
552 int	vnode_label(struct mount *mp, struct vnode *dvp, struct vnode *vp,
554 void	vnode_relabel(struct vnode *vp);
556 void psem_label_associate(struct fileproc *fp, struct vnode *vp, struct vfs_context *ctx);
557 void pshm_label_associate(struct fileproc *fp, struct vnode *vp, struct vfs_context *ctx);