security/mac_mls/mac_mls.c

227 mls_effective_in_range(struct mac_mls *effective, struct mac_mls *range)
230 	KASSERT((effective->mm_flags & MAC_MLS_FLAG_EFFECTIVE) != 0,
231 	    ("mls_effective_in_range: a not effective"));
236 	    &effective->mm_effective) &&
237 	    mls_dominate_element(&effective->mm_effective,
247 	    ("mls_dominate_effective: a not effective"));
249 	    ("mls_dominate_effective: b not effective"));
270 	    ("mls_equal_effective: a not effective"));
272 	    ("mls_equal_effective: b not effective"));
302 	/* If the effective is EQUAL, it's ok. */
441 	    ("mls_copy_effective: labelfrom not effective"));
655 	char *rangehigh, *rangelow, *effective;
658 	effective = strsep(&string, "(");
659 	if (*effective == '\0')
660 		effective = NULL;
681 	if (effective != NULL) {
682 		error = mls_parse_element(&mm->mm_effective, effective);
800 	 * update of effective, range, or both.
812 		 * effective and range, check that the new effective will be
820 		 * To change the MLS effective label on a credential, the new
821 		 * effective label must be in the current range.
990 	 * update of effective, range, or both.
1389 	 * If there is an MLS label update for a pipe, it must be a effective
1871 	 * update of effective.
1878 	 * To relabel a socket, the old socket effective must be in the
1889 		 * To relabel a socket, the new socket effective must be in
2484 		printf("mls_associated_vnode_extattr: not effective\n");
2860 	 * effective label.