xnu/security/mac_vfs.c

152  * vnode labels are allocated at the same time as vnodes, but vnodes are never
205 mac_vnode_label_destroy(struct vnode *vp)
225 mac_vnode_label_externalize_audit(struct vnode *vp, struct mac *mac)
229 	/* It is assumed that any necessary vnode locking is done on entry */
230 	error = MAC_EXTERNALIZE_AUDIT(vnode, vp->v_label,
242 	error = MAC_EXTERNALIZE(vnode, label, elements, outbuf, outbuflen);
252 	error = MAC_INTERNALIZE(vnode, label, string);
289     struct vnode *vp)
300 mac_vnode_label_associate(struct mount *mp, struct vnode *vp, vfs_context_t ctx)
329     struct vnode *vp)
341 mac_vnode_label_associate_extattr(struct mount *mp, struct vnode *vp)
352 mac_vnode_label_associate_singlelabel(struct mount *mp, struct vnode *vp)
364     struct vnode *dvp, struct vnode *vp, struct componentname *cnp)
381 mac_vnode_notify_rename(vfs_context_t ctx, struct vnode *vp,
382     struct vnode *dvp, struct componentname *cnp)
396 mac_vnode_notify_open(vfs_context_t ctx, struct vnode *vp, int acc_flags)
411  * policy to update the vnode label.
414 mac_vnode_label_update_extattr(struct mount *mp, struct vnode *vp,
434 mac_vnode_label_store(vfs_context_t ctx, struct vnode *vp,
451 mac_cred_label_update_execve(vfs_context_t ctx, kauth_cred_t new, struct vnode *vp,
472 mac_cred_check_label_update_execve(vfs_context_t ctx, struct vnode *vp,
489 mac_vnode_check_access(vfs_context_t ctx, struct vnode *vp,
508 mac_vnode_check_chdir(vfs_context_t ctx, struct vnode *dvp)
523 mac_vnode_check_chroot(vfs_context_t ctx, struct vnode *dvp,
539 mac_vnode_check_create(vfs_context_t ctx, struct vnode *dvp,
555 mac_vnode_check_unlink(vfs_context_t ctx, struct vnode *dvp, struct vnode *vp,
572 mac_vnode_check_deleteacl(vfs_context_t ctx, struct vnode *vp,
589 mac_vnode_check_deleteextattr(vfs_context_t ctx, struct vnode *vp,
605     struct vnode *v1, struct vnode *v2)
623 mac_vnode_check_getacl(vfs_context_t ctx, struct vnode *vp, acl_type_t type)
639 mac_vnode_check_getattrlist(vfs_context_t ctx, struct vnode *vp,
657 mac_vnode_check_exec(vfs_context_t ctx, struct vnode *vp,
675 mac_vnode_check_fsgetpath(vfs_context_t ctx, struct vnode *vp)
690 mac_vnode_check_signature(struct vnode *vp, unsigned char *sha1,
704 mac_vnode_check_getacl(vfs_context_t ctx, struct vnode *vp, acl_type_t type)
720 mac_vnode_check_getextattr(vfs_context_t ctx, struct vnode *vp,
737 mac_vnode_check_ioctl(vfs_context_t ctx, struct vnode *vp, u_int cmd)
753     struct knote *kn, struct vnode *vp)
770 mac_vnode_check_link(vfs_context_t ctx, struct vnode *dvp,
771     struct vnode *vp, struct componentname *cnp)
787 mac_vnode_check_listextattr(vfs_context_t ctx, struct vnode *vp)
802 mac_vnode_check_lookup(vfs_context_t ctx, struct vnode *dvp,
818 mac_vnode_check_open(vfs_context_t ctx, struct vnode *vp, int acc_mode)
834     struct vnode *vp)
851 mac_vnode_check_readdir(vfs_context_t ctx, struct vnode *dvp)
866 mac_vnode_check_readlink(vfs_context_t ctx, struct vnode *vp)
881 mac_vnode_check_label_update(vfs_context_t ctx, struct vnode *vp,
898 mac_vnode_check_rename_from(vfs_context_t ctx, struct vnode *dvp,
899     struct vnode *vp, struct componentname *cnp)
915 mac_vnode_check_rename_to(vfs_context_t ctx, struct vnode *dvp,
916     struct vnode *vp, int samedir, struct componentname *cnp)
932 mac_vnode_check_revoke(vfs_context_t ctx, struct vnode *vp)
947 mac_vnode_check_searchfs(vfs_context_t ctx, struct vnode *vp, struct attrlist *alist)
962 mac_vnode_check_select(vfs_context_t ctx, struct vnode *vp, int which)
978 mac_vnode_check_setacl(vfs_context_t ctx, struct vnode *vp, acl_type_t type,
995 mac_vnode_check_setattrlist(vfs_context_t ctx, struct vnode *vp,
1011 mac_vnode_check_setextattr(vfs_context_t ctx, struct vnode *vp,
1028 mac_vnode_check_setflags(vfs_context_t ctx, struct vnode *vp, u_long flags)
1043 mac_vnode_check_setmode(vfs_context_t ctx, struct vnode *vp, mode_t mode)
1058 mac_vnode_check_setowner(vfs_context_t ctx, struct vnode *vp, uid_t uid,
1074 mac_vnode_check_setutimes(vfs_context_t ctx, struct vnode *vp,
1092     struct vnode *vp)
1109     struct vnode *vp)
1127     struct vnode *vp)
1143 mac_vnode_check_uipc_bind(vfs_context_t ctx, struct vnode *dvp,
1159 mac_vnode_check_uipc_connect(vfs_context_t ctx, struct vnode *vp)
1174 mac_vnode_label_update(vfs_context_t ctx, struct vnode *vp, struct label *newlabel)
1247 mac_mount_check_mount(vfs_context_t ctx, struct vnode *vp,
1398 vn_setlabel(struct vnode *vp, struct label *intlabel, vfs_context_t context)
1418 	 * update the actual vnode label.  Question: maybe the filesystem
1419 	 * should update the vnode at the end as part of VNOP_SETLABEL()?
1446     struct vnode *vp, vfs_context_t ctx)
1451 	struct vnode *fvp;
1478 		fvp = (struct vnode *)fp->f_fglob->fg_data;