xnu/security/mac_vfs.c

89 static struct label *
92 	struct label *label;
94 	label = mac_labelzone_alloc(MAC_WAITOK);
95 	if (label == NULL)
97 	MAC_PERFORM(devfs_label_init, label);
98 	return (label);
108 static struct label *
111 	struct label *label;
113 	label = mac_labelzone_alloc(MAC_WAITOK);
114 	if (label == NULL)
116 	MAC_PERFORM(mount_label_init, label);
117 	return (label);
127 struct label *
130 	struct label *label;
132 	label = mac_labelzone_alloc(MAC_WAITOK);
133 	if (label == NULL)
135 	MAC_PERFORM(vnode_label_init, label);
136 	return (label);
164 mac_devfs_label_free(struct label *label)
166 	MAC_PERFORM(devfs_label_destroy, label);
167 	mac_labelzone_free(label);
180 mac_mount_label_free(struct label *label)
183 	MAC_PERFORM(mount_label_destroy, label);
184 	mac_labelzone_free(label);
197 mac_vnode_label_free(struct label *label)
199 	MAC_PERFORM(vnode_label_destroy, label);
200 	mac_labelzone_free(label);
215 mac_vnode_label_copy(struct label *src, struct label *dest)
237 mac_vnode_label_externalize(struct label *label, char *elements,
242 	error = MAC_EXTERNALIZE(vnode, label, elements, outbuf, outbuflen);
248 mac_vnode_label_internalize(struct label *label, char *string)
252 	error = MAC_INTERNALIZE(vnode, label, string);
258 mac_mount_label_internalize(struct label *label, char *string)
262 	error = MAC_INTERNALIZE(mount, label, string);
268 mac_mount_label_externalize(struct label *label, char *elements,
273 	error = MAC_EXTERNALIZE(mount, label, elements, outbuf, outbuflen);
279 mac_devfs_label_copy(struct label *src, struct label *dest)
411  * policy to update the vnode label.
435     struct label *intlabel)
452     struct label *scriptvnodelabel, struct label *execl)
461 	/* mark the new cred to indicate "matching" includes the label */
473     struct label *scriptvnodelabel, struct label *execlabel, struct proc *p)
882     struct label *newlabel)
1174 mac_vnode_label_update(vfs_context_t ctx, struct vnode *vp, struct label *newlabel)
1177 	struct label *tmpl = NULL;
1398 vn_setlabel(struct vnode *vp, struct label *intlabel, vfs_context_t context)
1418 	 * update the actual vnode label.  Question: maybe the filesystem
1458 	 * If no backing file, let the policy choose which label to use.