xnu/security/mac_vfs.c

366 	kauth_cred_t cred;
373 	cred = vfs_context_ucred(ctx);
374 	MAC_CHECK(vnode_notify_create, cred, mp, mp->mnt_mntlabel,
384 	kauth_cred_t cred;
390 	cred = vfs_context_ucred(ctx);
391 	MAC_PERFORM(vnode_notify_rename, cred, vp, vp->v_label,
398 	kauth_cred_t cred;
404 	cred = vfs_context_ucred(ctx);
405 	MAC_PERFORM(vnode_notify_open, cred, vp, vp->v_label, acc_flags);
437 	kauth_cred_t cred;
444 	cred = vfs_context_ucred(ctx);
445 	MAC_CHECK(vnode_label_store, cred, vp, vp->v_label, intlabel);
454 	kauth_cred_t cred;
461 	/* mark the new cred to indicate "matching" includes the label */
464 	cred = vfs_context_ucred(ctx);
465 	MAC_PERFORM(cred_label_update_execve, cred, new, vp, vp->v_label,
475 	kauth_cred_t cred;
481 	cred = vfs_context_ucred(ctx);
482 	MAC_BOOLEAN(cred_check_label_update_execve, ||, cred, vp, vp->v_label,
492 	kauth_cred_t cred;
500 	cred = vfs_context_ucred(ctx);
503 	MAC_CHECK(vnode_check_access, cred, vp, vp->v_label, mask);
510 	kauth_cred_t cred;
517 	cred = vfs_context_ucred(ctx);
518 	MAC_CHECK(vnode_check_chdir, cred, dvp, dvp->v_label);
526 	kauth_cred_t cred;
533 	cred = vfs_context_ucred(ctx);
534 	MAC_CHECK(vnode_check_chroot, cred, dvp, dvp->v_label, cnp);
542 	kauth_cred_t cred;
549 	cred = vfs_context_ucred(ctx);
550 	MAC_CHECK(vnode_check_create, cred, dvp, dvp->v_label, cnp, vap);
558 	kauth_cred_t cred;
565 	cred = vfs_context_ucred(ctx);
566 	MAC_CHECK(vnode_check_unlink, cred, dvp, dvp->v_label, vp,
575 	kauth_cred_t cred;
582 	cred = vfs_context_ucred(ctx);
583 	MAC_CHECK(vnode_check_deleteacl, cred, vp, vp->v_label, type);
592 	kauth_cred_t cred;
599 	cred = vfs_context_ucred(ctx);
600 	MAC_CHECK(vnode_check_deleteextattr, cred, vp, vp->v_label, name);
607 	kauth_cred_t cred;
614 	cred = vfs_context_ucred(ctx);
615 	MAC_CHECK(vnode_check_exchangedata, cred, v1, v1->v_label,
625 	kauth_cred_t cred;
632 	cred = vfs_context_ucred(ctx);
633 	MAC_CHECK(vnode_check_getacl, cred, vp, vp->v_label, type);
642 	kauth_cred_t cred;
649 	cred = vfs_context_ucred(ctx);
650 	MAC_CHECK(vnode_check_getattrlist, cred, vp, vp->v_label, alist);
660 	kauth_cred_t cred;
666 	cred = vfs_context_ucred(ctx);
667 	MAC_CHECK(vnode_check_exec, cred, vp, vp->v_label,
677 	kauth_cred_t cred;
684 	cred = vfs_context_ucred(ctx);
685 	MAC_CHECK(vnode_check_fsgetpath, cred, vp, vp->v_label);
706 	kauth_cred_t cred;
713 	cred = vfs_context_ucred(ctx);
714 	MAC_CHECK(vnode_check_getacl, cred, vp, vp->v_label, type);
723 	kauth_cred_t cred;
730 	cred = vfs_context_ucred(ctx);
731 	MAC_CHECK(vnode_check_getextattr, cred, vp, vp->v_label,
739 	kauth_cred_t cred;
746 	cred = vfs_context_ucred(ctx);
747 	MAC_CHECK(vnode_check_ioctl, cred, vp, vp->v_label, cmd);
755 	kauth_cred_t cred;
762 	cred = vfs_context_ucred(ctx);
763 	MAC_CHECK(vnode_check_kqfilter, cred, file_cred, kn, vp,
773 	kauth_cred_t cred;
780 	cred = vfs_context_ucred(ctx);
781 	MAC_CHECK(vnode_check_link, cred, dvp, dvp->v_label, vp,
789 	kauth_cred_t cred;
796 	cred = vfs_context_ucred(ctx);
797 	MAC_CHECK(vnode_check_listextattr, cred, vp, vp->v_label);
805 	kauth_cred_t cred;
812 	cred = vfs_context_ucred(ctx);
813 	MAC_CHECK(vnode_check_lookup, cred, dvp, dvp->v_label, cnp);
820 	kauth_cred_t cred;
827 	cred = vfs_context_ucred(ctx);
828 	MAC_CHECK(vnode_check_open, cred, vp, vp->v_label, acc_mode);
836 	kauth_cred_t cred;
843 	cred = vfs_context_ucred(ctx);
844 	MAC_CHECK(vnode_check_read, cred, file_cred, vp,
853 	kauth_cred_t cred;
860 	cred = vfs_context_ucred(ctx);
861 	MAC_CHECK(vnode_check_readdir, cred, dvp, dvp->v_label);
868 	kauth_cred_t cred;
875 	cred = vfs_context_ucred(ctx);
876 	MAC_CHECK(vnode_check_readlink, cred, vp, vp->v_label);
884 	kauth_cred_t cred;
891 	cred = vfs_context_ucred(ctx);
892 	MAC_CHECK(vnode_check_label_update, cred, vp, vp->v_label, newlabel);
901 	kauth_cred_t cred;
908 	cred = vfs_context_ucred(ctx);
909 	MAC_CHECK(vnode_check_rename_from, cred, dvp, dvp->v_label, vp,
918 	kauth_cred_t cred;
925 	cred = vfs_context_ucred(ctx);
926 	MAC_CHECK(vnode_check_rename_to, cred, dvp, dvp->v_label, vp,
934 	kauth_cred_t cred;
941 	cred = vfs_context_ucred(ctx);
942 	MAC_CHECK(vnode_check_revoke, cred, vp, vp->v_label);
949 	kauth_cred_t cred;
956 	cred = vfs_context_ucred(ctx);
957 	MAC_CHECK(vnode_check_searchfs, cred, vp, vp->v_label, alist);
964 	kauth_cred_t cred;
971 	cred = vfs_context_ucred(ctx);
972 	MAC_CHECK(vnode_check_select, cred, vp, vp->v_label, which);
981 	kauth_cred_t cred;
988 	cred = vfs_context_ucred(ctx);
989 	MAC_CHECK(vnode_check_setacl, cred, vp, vp->v_label, type, acl);
998 	kauth_cred_t cred;
1005 	cred = vfs_context_ucred(ctx);
1006 	MAC_CHECK(vnode_check_setattrlist, cred, vp, vp->v_label, alist);
1014 	kauth_cred_t cred;
1021 	cred = vfs_context_ucred(ctx);
1022 	MAC_CHECK(vnode_check_setextattr, cred, vp, vp->v_label,
1030 	kauth_cred_t cred;
1037 	cred = vfs_context_ucred(ctx);
1038 	MAC_CHECK(vnode_check_setflags, cred, vp, vp->v_label, flags);
1045 	kauth_cred_t cred;
1052 	cred = vfs_context_ucred(ctx);
1053 	MAC_CHECK(vnode_check_setmode, cred, vp, vp->v_label, mode);
1061 	kauth_cred_t cred;
1068 	cred = vfs_context_ucred(ctx);
1069 	MAC_CHECK(vnode_check_setowner, cred, vp, vp->v_label, uid, gid);
1077 	kauth_cred_t cred;
1084 	cred = vfs_context_ucred(ctx);
1085 	MAC_CHECK(vnode_check_setutimes, cred, vp, vp->v_label, atime,
1094 	kauth_cred_t cred;
1101 	cred = vfs_context_ucred(ctx);
1102 	MAC_CHECK(vnode_check_stat, cred, file_cred, vp,
1111 	kauth_cred_t cred;
1118 	cred = vfs_context_ucred(ctx);
1119 	MAC_CHECK(vnode_check_truncate, cred, file_cred, vp,
1129 	kauth_cred_t cred;
1136 	cred = vfs_context_ucred(ctx);
1137 	MAC_CHECK(vnode_check_write, cred, file_cred, vp, vp->v_label);
1146 	kauth_cred_t cred;
1153 	cred = vfs_context_ucred(ctx);
1154 	MAC_CHECK(vnode_check_uipc_bind, cred, dvp, dvp->v_label, cnp, vap);
1161 	kauth_cred_t cred;
1168 	cred = vfs_context_ucred(ctx);
1169 	MAC_CHECK(vnode_check_uipc_connect, cred, vp, vp->v_label);
1176 	kauth_cred_t cred = vfs_context_ucred(ctx);
1190 	MAC_PERFORM(vnode_label_update, cred, vp, vp->v_label, newlabel);
1200 	kauth_cred_t cred = vfs_context_ucred(ctx);
1236 	MAC_PERFORM(mount_label_associate, cred, mp, mp->mnt_mntlabel);
1250 	kauth_cred_t cred;
1257 	cred = vfs_context_ucred(ctx);
1258 	MAC_CHECK(mount_check_mount, cred, vp, vp->v_label, cnp, vfc_name);
1266 	kauth_cred_t cred;
1273 	cred = vfs_context_ucred(ctx);
1274 	MAC_CHECK(mount_check_remount, cred, mp, mp->mnt_mntlabel);
1282 	kauth_cred_t cred;
1289 	cred = vfs_context_ucred(ctx);
1290 	MAC_CHECK(mount_check_umount, cred, mp, mp->mnt_mntlabel);
1299 	kauth_cred_t cred;
1306 	cred = vfs_context_ucred(ctx);
1307 	MAC_CHECK(mount_check_getattr, cred, mp, mp->mnt_mntlabel, vfa);
1315 	kauth_cred_t cred;
1322 	cred = vfs_context_ucred(ctx);
1323 	MAC_CHECK(mount_check_setattr, cred, mp, mp->mnt_mntlabel, vfa);
1330 	kauth_cred_t cred;
1337 	cred = vfs_context_ucred(ctx);
1338 	MAC_CHECK(mount_check_stat, cred, mount, mount->mnt_mntlabel);
1346 	kauth_cred_t cred;
1353 	cred = vfs_context_ucred(ctx);
1354 	MAC_CHECK(mount_check_label_update, cred, mount, mount->mnt_mntlabel);
1362 	kauth_cred_t cred;
1369 	cred = vfs_context_ucred(ctx);
1370 	MAC_CHECK(mount_check_fsctl, cred, mp, mp->mnt_mntlabel, cmd);