xnu/security/mac_policy.h

179   This is the MAC Framework audit postselect, which is called before
204   This is the MAC Framework audit preselect, which is called before a
438   @param element_name Name of the label namespace for which labels should be
460   @param element_name Name of the label namespace for which labels should be
492   @param element_name Name of the label namespace for which the label should
1022   @param element_name Name of the label namespace for which labels should be
1051   @param element_name Name of the label namespace for which the label should
1193   This is the MAC Framework device access control, which is called by the I/O
1378   @param element_name Name of the label namespace for which labels should be
1407   @param element_name Name of the label namespace for which the label should
1509  Label an mbuf based on the interface from which it was received.
1524  Label an mbuf based on the inpcb from which it was derived.
1540   fragment reassembly queue (ipq) from which it was generated.
1857   @param element_name Name of the label namespace for which labels should be
1896   @param element_name Name of the label namespace for which the label should
2047   @param which The operation selected on: FREAD or FWRITE
2061 	int which
2144   @param element_name Name of the label namespace for which labels should be
2179   @param element_name Name of the label namespace for which the label should
2624   The target task is the one which recieves the first right for this port.
3020  Unlike other MAC hooks which can only reduce the privilege of a
3440   on the wire, it eventually gets deposited into this queue, which the
3576   @param which The operation selected on: FREAD or FWRITE
3588 	int which
3723   @param element_name Name of the label namespace for which labels should be
3765   @param element_name Name of the label namespace for which the label should
3864   @param element_name Name of the label namespace for which labels should be
4690   @param element_name Name of the label namespace for which labels should be
4721   @param element_name Name of the label namespace for which the label should
4954   @param vp Vnode for which a path will be returned
4984   which that vnode resides. See <sys/attr.h> for definitions of the
5332   @param which The operation selected on: FREAD or FWRITE
5344 	int which
5355   which that vnode resides. See <sys/attr.h> for definitions of the
5814   @param element_name Name of the label namespace for which labels should be
5836   @param element_name Name of the label namespace for which labels should be
5871   @param element_name Name of the label namespace for which the label should
5906   @param vp The vnode for which the label is being stored