xnu/security/mac_process.c

82 struct label *
85 	struct label *label;
87 	label = mac_labelzone_alloc(MAC_WAITOK);
88 	if (label == NULL)
90 	MAC_PERFORM(cred_label_init, label);
91 	return (label);
101 mac_cred_label_free(struct label *label)
103 	MAC_PERFORM(cred_label_destroy, label);
104 	mac_labelzone_free(label);
108 mac_cred_label_compare(struct label *a, struct label *b)
137 mac_cred_label_externalize(struct label *label, char *elements,
142 	error = MAC_EXTERNALIZE(cred, label, elements, outbuf, outbuflen);
148 mac_cred_label_internalize(struct label *label, char *string)
152 	error = MAC_INTERNALIZE(cred, label, string);
161  * label.
170  * Initialize MAC label for the first kernel process, from which other
181  * Initialize MAC label for the first userland process, from which other
192  * When a new process is created, its label must be initialized.  Generally,
207 	struct label *execlabel;
252  * When the subject's label changes, it may require revocation of privilege
260 mac_cred_label_update(kauth_cred_t cred, struct label *newlabel)
264 	/* force label to be part of "matching" for credential */
272 mac_cred_check_label_update(kauth_cred_t cred, struct label *newlabel)
526 struct label *
529 	struct label *label;
531 	label = mac_labelzone_alloc(MAC_WAITOK);
532 	if (label == NULL)
534 	MAC_PERFORM(lctx_label_init, label);
535 	return (label);
539 mac_lctx_label_free(struct label *label)
542 	MAC_PERFORM(lctx_label_destroy, label);
543 	mac_labelzone_free(label);
547 mac_lctx_label_externalize(struct label *label, char *elements,
552 	error = MAC_EXTERNALIZE(lctx, label, elements, outbuf, outbuflen);
558 mac_lctx_label_internalize(struct label *label, char *string)
562 	error = MAC_INTERNALIZE(lctx, label, string);
568 mac_lctx_label_update(struct lctx *l, struct label *newlabel)
575 mac_lctx_check_label_update(struct lctx *l, struct label *newlabel)
619 struct label *
622 	struct label *label;
624 	label = mac_labelzone_alloc(MAC_WAITOK);
625 	if (label == NULL)
627 	MAC_PERFORM(thread_label_init, label);
628 	return (label);
638 mac_thread_label_free(struct label *label)
640 	MAC_PERFORM(thread_label_destroy, label);
641 	mac_labelzone_free(label);
659 struct label *
666 struct label *