xnu-2422.115.4/security/mac_framework.h

153 int	mac_audit_check_postselect(kauth_cred_t cred, unsigned short syscode,
155 int	mac_audit_check_preselect(kauth_cred_t cred, unsigned short syscode,
160 void	mac_bpfdesc_label_associate(kauth_cred_t cred, struct bpf_d *bpf_d);
161 int	mac_cred_check_label_update(kauth_cred_t cred,
166 int	mac_cred_check_visible(kauth_cred_t u1, kauth_cred_t u2);
168 void	mac_cred_label_associate(kauth_cred_t cred_parent,
169 	    kauth_cred_t cred_child);
170 void	mac_cred_label_associate_fork(kauth_cred_t cred, proc_t child);
171 void	mac_cred_label_associate_kernel(kauth_cred_t cred);
172 void	mac_cred_label_associate_user(kauth_cred_t cred);
173 void	mac_cred_label_destroy(kauth_cred_t cred);
176 void	mac_cred_label_init(kauth_cred_t cred);
178 void	mac_cred_label_update(kauth_cred_t cred, struct label *newlabel);
179 int	mac_cred_label_update_execve(vfs_context_t ctx, kauth_cred_t newcred,
192 int	mac_file_check_change_offset(kauth_cred_t cred, struct fileglob *fg);
193 int	mac_file_check_create(kauth_cred_t cred);
194 int	mac_file_check_dup(kauth_cred_t cred, struct fileglob *fg, int newfd);
195 int	mac_file_check_fcntl(kauth_cred_t cred, struct fileglob *fg, int cmd,
197 int	mac_file_check_get(kauth_cred_t cred, struct fileglob *fg,
199 int	mac_file_check_get_offset(kauth_cred_t cred, struct fileglob *fg);
200 int	mac_file_check_inherit(kauth_cred_t cred, struct fileglob *fg);
201 int	mac_file_check_ioctl(kauth_cred_t cred, struct fileglob *fg,
203 int	mac_file_check_lock(kauth_cred_t cred, struct fileglob *fg, int op,
205 int	mac_file_check_mmap(kauth_cred_t cred, struct fileglob *fg,
207 void	mac_file_check_mmap_downgrade(kauth_cred_t cred, struct fileglob *fg,
209 int	mac_file_check_receive(kauth_cred_t cred, struct fileglob *fg);
210 int	mac_file_check_set(kauth_cred_t cred, struct fileglob *fg,
212 void	mac_file_label_associate(kauth_cred_t cred, struct fileglob *fg);
219 int	mac_ifnet_label_get(kauth_cred_t cred, struct ifreq *ifr,
223 int	mac_ifnet_label_set(kauth_cred_t cred, struct ifreq *ifr,
233 int	mac_iokit_check_open(kauth_cred_t cred, io_object_t user_client, unsigned int user_client_type);
234 int	mac_iokit_check_set_properties(kauth_cred_t cred, io_object_t registry_entry, io_object_t properties);
235 int	mac_iokit_check_hid_control(kauth_cred_t cred);
286 int	mac_pipe_check_ioctl(kauth_cred_t cred, struct pipe *cpipe,
288 int	mac_pipe_check_kqfilter(kauth_cred_t cred, struct knote *kn,
290 int	mac_pipe_check_read(kauth_cred_t cred, struct pipe *cpipe);
291 int	mac_pipe_check_select(kauth_cred_t cred, struct pipe *cpipe,
293 int	mac_pipe_check_stat(kauth_cred_t cred, struct pipe *cpipe);
294 int	mac_pipe_check_write(kauth_cred_t cred, struct pipe *cpipe);
296 void	mac_pipe_label_associate(kauth_cred_t cred, struct pipe *cpipe);
301 int	mac_pipe_label_update(kauth_cred_t cred, struct pipe *cpipe,
304 int	mac_posixsem_check_create(kauth_cred_t cred, const char *name);
305 int	mac_posixsem_check_open(kauth_cred_t cred, struct pseminfo *psem);
306 int	mac_posixsem_check_post(kauth_cred_t cred, struct pseminfo *psem);
307 int	mac_posixsem_check_unlink(kauth_cred_t cred, struct pseminfo *psem,
309 int	mac_posixsem_check_wait(kauth_cred_t cred, struct pseminfo *psem);
310 void	mac_posixsem_vnode_label_associate(kauth_cred_t cred,
313 void	mac_posixsem_label_associate(kauth_cred_t cred,
317 int	mac_posixshm_check_create(kauth_cred_t cred, const char *name);
318 int	mac_posixshm_check_mmap(kauth_cred_t cred, struct pshminfo *pshm,
320 int	mac_posixshm_check_open(kauth_cred_t cred, struct pshminfo *pshm,
322 int	mac_posixshm_check_stat(kauth_cred_t cred, struct pshminfo *pshm);
323 int	mac_posixshm_check_truncate(kauth_cred_t cred, struct pshminfo *pshm,
325 int	mac_posixshm_check_unlink(kauth_cred_t cred, struct pshminfo *pshm,
327 void	mac_posixshm_vnode_label_associate(kauth_cred_t cred,
330 void	mac_posixshm_label_associate(kauth_cred_t cred,
334 int	mac_priv_check(kauth_cred_t cred, int priv);
335 int	mac_priv_grant(kauth_cred_t cred, int priv);
341 int	mac_proc_check_get_task_name(kauth_cred_t cred, struct proc *p);
342 int	mac_proc_check_get_task(kauth_cred_t cred, struct proc *p);
362 int	mac_setsockopt_label(kauth_cred_t cred, struct socket *so,
364 int     mac_socket_check_accept(kauth_cred_t cred, struct socket *so);
365 int     mac_socket_check_accepted(kauth_cred_t cred, struct socket *so);
366 int	mac_socket_check_bind(kauth_cred_t cred, struct socket *so,
368 int	mac_socket_check_connect(kauth_cred_t cred, struct socket *so,
370 int	mac_socket_check_create(kauth_cred_t cred, int domain,
373 int	mac_socket_check_kqfilter(kauth_cred_t cred, struct knote *kn,
375 int	mac_socket_check_listen(kauth_cred_t cred, struct socket *so);
376 int	mac_socket_check_receive(kauth_cred_t cred, struct socket *so);
377 int	mac_socket_check_received(kauth_cred_t cred, struct socket *so,
379 int     mac_socket_check_select(kauth_cred_t cred, struct socket *so,
381 int	mac_socket_check_send(kauth_cred_t cred, struct socket *so,
383 int	mac_socket_check_getsockopt(kauth_cred_t cred, struct socket *so,
385 int	mac_socket_check_setsockopt(kauth_cred_t cred, struct socket *so,
387 int	mac_socket_check_stat(kauth_cred_t cred, struct socket *so);
388 void	mac_socket_label_associate(kauth_cred_t cred, struct socket *so);
393 int	mac_socket_label_get(kauth_cred_t cred, struct socket *so,
399 int	mac_socketpeer_label_get(kauth_cred_t cred, struct socket *so,
401 int	mac_system_check_acct(kauth_cred_t cred, struct vnode *vp);
402 int	mac_system_check_audit(kauth_cred_t cred, void *record, int length);
403 int	mac_system_check_auditctl(kauth_cred_t cred, struct vnode *vp);
404 int	mac_system_check_auditon(kauth_cred_t cred, int cmd);
405 int	mac_system_check_chud(kauth_cred_t cred);
406 int	mac_system_check_host_priv(kauth_cred_t cred);
407 int	mac_system_check_info(kauth_cred_t, const char *info_type);
408 int	mac_system_check_nfsd(kauth_cred_t cred);
409 int	mac_system_check_reboot(kauth_cred_t cred, int howto);
410 int	mac_system_check_settime(kauth_cred_t cred);
411 int	mac_system_check_swapoff(kauth_cred_t cred, struct vnode *vp);
412 int	mac_system_check_swapon(kauth_cred_t cred, struct vnode *vp);
413 int	mac_system_check_sysctl(kauth_cred_t cred, int *name,
416 int	mac_system_check_kas_info(kauth_cred_t cred, int selector);
417 void	mac_sysvmsg_label_associate(kauth_cred_t cred,
421 int	mac_sysvmsq_check_enqueue(kauth_cred_t cred, struct msg *msgptr,
423 int	mac_sysvmsq_check_msgrcv(kauth_cred_t cred, struct msg *msgptr);
424 int	mac_sysvmsq_check_msgrmid(kauth_cred_t cred, struct msg *msgptr);
425 int	mac_sysvmsq_check_msqctl(kauth_cred_t cred,
427 int	mac_sysvmsq_check_msqget(kauth_cred_t cred,
429 int	mac_sysvmsq_check_msqrcv(kauth_cred_t cred,
431 int	mac_sysvmsq_check_msqsnd(kauth_cred_t cred,
433 void	mac_sysvmsq_label_associate(kauth_cred_t cred,
437 int	mac_sysvsem_check_semctl(kauth_cred_t cred,
439 int	mac_sysvsem_check_semget(kauth_cred_t cred,
441 int	mac_sysvsem_check_semop(kauth_cred_t cred,
443 void	mac_sysvsem_label_associate(kauth_cred_t cred,
448 int	mac_sysvshm_check_shmat(kauth_cred_t cred,
450 int	mac_sysvshm_check_shmctl(kauth_cred_t cred,
452 int	mac_sysvshm_check_shmdt(kauth_cred_t cred,
454 int	mac_sysvshm_check_shmget(kauth_cred_t cred,
456 void	mac_sysvshm_label_associate(kauth_cred_t cred,
488 	    kauth_cred_t file_cred, struct knote *kn, struct vnode *vp);
499 	    kauth_cred_t file_cred, struct vnode *vp);
524 	    kauth_cred_t file_cred, struct vnode *vp);
526 	    kauth_cred_t file_cred, struct vnode *vp);
533 	    kauth_cred_t file_cred, struct vnode *vp);
568 int	mac_kext_check_load(kauth_cred_t cred, const char *identifier);
569 int	mac_kext_check_unload(kauth_cred_t cred, const char *identifier);