xnu/security/mac_vfs.c

142 	vp->v_label = mac_vnode_label_alloc();
148 	return (mac_label_vnodes != 0 && vp->v_label == NULL);
160 	MAC_PERFORM(vnode_label_recycle, vp->v_label);
207 	if (vp->v_label != NULL) {
208 		mac_vnode_label_free(vp->v_label);
209 		vp->v_label = NULL;
230 	error = MAC_EXTERNALIZE_AUDIT(vnode, vp->v_label,
296 	    vp->v_label);
337 	    vp, vp->v_label);
346 	    vp->v_label);
359 	    mp ? mp->mnt_mntlabel : NULL, vp, vp->v_label);
375 	    dvp, dvp->v_label, vp, vp->v_label, cnp);
391 	MAC_PERFORM(vnode_notify_rename, cred, vp, vp->v_label,
392 	    dvp, dvp->v_label, cnp);
405 	MAC_PERFORM(vnode_notify_open, cred, vp, vp->v_label, acc_flags);
423 		    vp->v_label, name);
445 	MAC_CHECK(vnode_label_store, cred, vp, vp->v_label, intlabel);
465 	MAC_PERFORM(cred_label_update_execve, cred, new, vp, vp->v_label,
482 	MAC_BOOLEAN(cred_check_label_update_execve, ||, cred, vp, vp->v_label,
503 	MAC_CHECK(vnode_check_access, cred, vp, vp->v_label, mask);
518 	MAC_CHECK(vnode_check_chdir, cred, dvp, dvp->v_label);
534 	MAC_CHECK(vnode_check_chroot, cred, dvp, dvp->v_label, cnp);
550 	MAC_CHECK(vnode_check_create, cred, dvp, dvp->v_label, cnp, vap);
566 	MAC_CHECK(vnode_check_unlink, cred, dvp, dvp->v_label, vp,
567 	    vp->v_label, cnp);
583 	MAC_CHECK(vnode_check_deleteacl, cred, vp, vp->v_label, type);
600 	MAC_CHECK(vnode_check_deleteextattr, cred, vp, vp->v_label, name);
615 	MAC_CHECK(vnode_check_exchangedata, cred, v1, v1->v_label,
616 	    v2, v2->v_label);
633 	MAC_CHECK(vnode_check_getacl, cred, vp, vp->v_label, type);
650 	MAC_CHECK(vnode_check_getattrlist, cred, vp, vp->v_label, alist);
667 	MAC_CHECK(vnode_check_exec, cred, vp, vp->v_label,
685 	MAC_CHECK(vnode_check_fsgetpath, cred, vp, vp->v_label);
698 	MAC_CHECK(vnode_check_signature, vp, vp->v_label, sha1, signature, size);
714 	MAC_CHECK(vnode_check_getacl, cred, vp, vp->v_label, type);
731 	MAC_CHECK(vnode_check_getextattr, cred, vp, vp->v_label,
747 	MAC_CHECK(vnode_check_ioctl, cred, vp, vp->v_label, cmd);
764 	    vp->v_label);
781 	MAC_CHECK(vnode_check_link, cred, dvp, dvp->v_label, vp,
782 	    vp->v_label, cnp);
797 	MAC_CHECK(vnode_check_listextattr, cred, vp, vp->v_label);
813 	MAC_CHECK(vnode_check_lookup, cred, dvp, dvp->v_label, cnp);
828 	MAC_CHECK(vnode_check_open, cred, vp, vp->v_label, acc_mode);
845 	    vp->v_label);
861 	MAC_CHECK(vnode_check_readdir, cred, dvp, dvp->v_label);
876 	MAC_CHECK(vnode_check_readlink, cred, vp, vp->v_label);
892 	MAC_CHECK(vnode_check_label_update, cred, vp, vp->v_label, newlabel);
909 	MAC_CHECK(vnode_check_rename_from, cred, dvp, dvp->v_label, vp,
910 	    vp->v_label, cnp);
926 	MAC_CHECK(vnode_check_rename_to, cred, dvp, dvp->v_label, vp,
927 	    vp != NULL ? vp->v_label : NULL, samedir, cnp);
942 	MAC_CHECK(vnode_check_revoke, cred, vp, vp->v_label);
957 	MAC_CHECK(vnode_check_searchfs, cred, vp, vp->v_label, alist);
972 	MAC_CHECK(vnode_check_select, cred, vp, vp->v_label, which);
989 	MAC_CHECK(vnode_check_setacl, cred, vp, vp->v_label, type, acl);
1006 	MAC_CHECK(vnode_check_setattrlist, cred, vp, vp->v_label, alist);
1022 	MAC_CHECK(vnode_check_setextattr, cred, vp, vp->v_label,
1038 	MAC_CHECK(vnode_check_setflags, cred, vp, vp->v_label, flags);
1053 	MAC_CHECK(vnode_check_setmode, cred, vp, vp->v_label, mode);
1069 	MAC_CHECK(vnode_check_setowner, cred, vp, vp->v_label, uid, gid);
1085 	MAC_CHECK(vnode_check_setutimes, cred, vp, vp->v_label, atime,
1103 	    vp->v_label);
1120 	    vp->v_label);
1137 	MAC_CHECK(vnode_check_write, cred, file_cred, vp, vp->v_label);
1154 	MAC_CHECK(vnode_check_uipc_bind, cred, dvp, dvp->v_label, cnp, vap);
1169 	MAC_CHECK(vnode_check_uipc_connect, cred, vp, vp->v_label);
1179 	if (vp->v_label == NULL)
1185 	if (vp->v_label == NULL) {
1186 		vp->v_label = tmpl;
1190 	MAC_PERFORM(vnode_label_update, cred, vp, vp->v_label, newlabel);
1258 	MAC_CHECK(mount_check_mount, cred, vp, vp->v_label, cnp, vfc_name);
1462 		    mp, mp->mnt_mntlabel, NULL, NULL, vp, vp->v_label);
1481 		MAC_PERFORM(vnode_label_copy, fvp->v_label, vp->v_label);
1489 		    vp, vp->v_label);
1507 		    cpipe, cpipe->pipe_label, vp, vp->v_label);
1515 		    vp, vp->v_label);