xnu/security/mac_process.c

95 mac_cred_label_init(struct ucred *cred)
97 	cred->cr_label = mac_cred_label_alloc();
121 	error = MAC_EXTERNALIZE_AUDIT(cred, cr->cr_label,
129 mac_cred_label_destroy(kauth_cred_t cred)
132 	mac_cred_label_free(cred->cr_label);
133 	cred->cr_label = NULL;
142 	error = MAC_EXTERNALIZE(cred, label, elements, outbuf, outbuflen);
152 	error = MAC_INTERNALIZE(cred, label, string);
164 mac_cred_label_associate_fork(kauth_cred_t cred, proc_t proc)
166 	MAC_PERFORM(cred_label_associate_fork, cred, proc);
174 mac_cred_label_associate_kernel(kauth_cred_t cred)
177 	MAC_PERFORM(cred_label_associate_kernel, cred);
185 mac_cred_label_associate_user(kauth_cred_t cred)
188 	MAC_PERFORM(cred_label_associate_user, cred);
260 mac_cred_label_update(kauth_cred_t cred, struct label *newlabel)
262 	posix_cred_t pcred = posix_cred_get(cred);
268 	MAC_PERFORM(cred_label_update, cred, newlabel);
272 mac_cred_check_label_update(kauth_cred_t cred, struct label *newlabel)
279 	MAC_CHECK(cred_check_label_update, cred, newlabel);
313 	kauth_cred_t cred;
322 	cred = kauth_cred_proc_ref(curp);
323 	MAC_CHECK(proc_check_debug, cred, proc);
324 	kauth_cred_unref(&cred);
332 	kauth_cred_t cred;
339 	cred = kauth_cred_proc_ref(curp);
340 	MAC_CHECK(proc_check_fork, cred, curp);
341 	kauth_cred_unref(&cred);
347 mac_proc_check_get_task_name(struct ucred *cred, struct proc *p)
351 	MAC_CHECK(proc_check_get_task_name, cred, p);
357 mac_proc_check_get_task(struct ucred *cred, struct proc *p)
361 	MAC_CHECK(proc_check_get_task, cred, p);
375 	kauth_cred_t cred;
382 	cred = kauth_cred_proc_ref(proc);
383 	MAC_CHECK(proc_check_map_anon, proc, cred, u_addr, u_size, prot, flags, maxprot);
384 	kauth_cred_unref(&cred);
393 	kauth_cred_t cred;
400 	cred = kauth_cred_proc_ref(proc);
401 	MAC_CHECK(proc_check_mprotect, cred, proc, addr, size, prot);
402 	kauth_cred_unref(&cred);
422 	kauth_cred_t cred;
431 	cred = kauth_cred_proc_ref(curp);
432 	MAC_CHECK(proc_check_sched, cred, proc);
433 	kauth_cred_unref(&cred);
441 	kauth_cred_t cred;
450 	cred = kauth_cred_proc_ref(curp);
451 	MAC_CHECK(proc_check_signal, cred, proc, signum);
452 	kauth_cred_unref(&cred);
460 	kauth_cred_t cred;
469 	cred = kauth_cred_proc_ref(curp);
470 	MAC_CHECK(proc_check_wait, cred, proc);
471 	kauth_cred_unref(&cred);
588 	kauth_cred_t cred;
595 	cred = kauth_cred_proc_ref(curp);
596 	MAC_CHECK(proc_check_suspend_resume, cred, curp, sr);
597 	kauth_cred_unref(&cred);
605 	kauth_cred_t cred;
612 	cred = kauth_cred_proc_ref(curp);
613 	MAC_CHECK(proc_check_ledger, cred, proc, ledger_op);
614 	kauth_cred_unref(&cred);