xnu-2782.1.97/security/mac_framework.h

146 int	mac_audit_check_postselect(kauth_cred_t cred, unsigned short syscode,
148 int	mac_audit_check_preselect(kauth_cred_t cred, unsigned short syscode,
153 void	mac_bpfdesc_label_associate(kauth_cred_t cred, struct bpf_d *bpf_d);
154 int	mac_cred_check_label_update(kauth_cred_t cred,
160 int	mac_cred_check_visible(kauth_cred_t u1, kauth_cred_t u2);
162 void	mac_cred_label_associate(kauth_cred_t cred_parent,
163 	    kauth_cred_t cred_child);
164 void	mac_cred_label_associate_fork(kauth_cred_t cred, proc_t child);
165 void	mac_cred_label_associate_kernel(kauth_cred_t cred);
166 void	mac_cred_label_associate_user(kauth_cred_t cred);
167 void	mac_cred_label_destroy(kauth_cred_t cred);
170 void	mac_cred_label_init(kauth_cred_t cred);
172 void	mac_cred_label_update(kauth_cred_t cred, struct label *newlabel);
173 void	mac_cred_label_update_execve(vfs_context_t ctx, kauth_cred_t newcred,
187 int	mac_file_check_change_offset(kauth_cred_t cred, struct fileglob *fg);
188 int	mac_file_check_create(kauth_cred_t cred);
189 int	mac_file_check_dup(kauth_cred_t cred, struct fileglob *fg, int newfd);
190 int	mac_file_check_fcntl(kauth_cred_t cred, struct fileglob *fg, int cmd,
192 int	mac_file_check_get(kauth_cred_t cred, struct fileglob *fg,
194 int	mac_file_check_get_offset(kauth_cred_t cred, struct fileglob *fg);
195 int	mac_file_check_inherit(kauth_cred_t cred, struct fileglob *fg);
196 int	mac_file_check_ioctl(kauth_cred_t cred, struct fileglob *fg,
198 int	mac_file_check_lock(kauth_cred_t cred, struct fileglob *fg, int op,
200 int	mac_file_check_mmap(kauth_cred_t cred, struct fileglob *fg,
202 void	mac_file_check_mmap_downgrade(kauth_cred_t cred, struct fileglob *fg,
204 int	mac_file_check_receive(kauth_cred_t cred, struct fileglob *fg);
205 int	mac_file_check_set(kauth_cred_t cred, struct fileglob *fg,
207 void	mac_file_label_associate(kauth_cred_t cred, struct fileglob *fg);
214 int	mac_ifnet_label_get(kauth_cred_t cred, struct ifreq *ifr,
218 int	mac_ifnet_label_set(kauth_cred_t cred, struct ifreq *ifr,
228 int	mac_iokit_check_open(kauth_cred_t cred, io_object_t user_client, unsigned int user_client_type);
229 int	mac_iokit_check_set_properties(kauth_cred_t cred, io_object_t registry_entry, io_object_t properties);
230 int	mac_iokit_check_filter_properties(kauth_cred_t cred, io_object_t registry_entry);
231 int	mac_iokit_check_get_property(kauth_cred_t cred, io_object_t registry_entry, const char *name);
232 int	mac_iokit_check_hid_control(kauth_cred_t cred);
283 int	mac_pipe_check_ioctl(kauth_cred_t cred, struct pipe *cpipe,
285 int	mac_pipe_check_kqfilter(kauth_cred_t cred, struct knote *kn,
287 int	mac_pipe_check_read(kauth_cred_t cred, struct pipe *cpipe);
288 int	mac_pipe_check_select(kauth_cred_t cred, struct pipe *cpipe,
290 int	mac_pipe_check_stat(kauth_cred_t cred, struct pipe *cpipe);
291 int	mac_pipe_check_write(kauth_cred_t cred, struct pipe *cpipe);
293 void	mac_pipe_label_associate(kauth_cred_t cred, struct pipe *cpipe);
298 int	mac_pipe_label_update(kauth_cred_t cred, struct pipe *cpipe,
301 int	mac_posixsem_check_create(kauth_cred_t cred, const char *name);
302 int	mac_posixsem_check_open(kauth_cred_t cred, struct pseminfo *psem);
303 int	mac_posixsem_check_post(kauth_cred_t cred, struct pseminfo *psem);
304 int	mac_posixsem_check_unlink(kauth_cred_t cred, struct pseminfo *psem,
306 int	mac_posixsem_check_wait(kauth_cred_t cred, struct pseminfo *psem);
307 void	mac_posixsem_vnode_label_associate(kauth_cred_t cred,
310 void	mac_posixsem_label_associate(kauth_cred_t cred,
314 int	mac_posixshm_check_create(kauth_cred_t cred, const char *name);
315 int	mac_posixshm_check_mmap(kauth_cred_t cred, struct pshminfo *pshm,
317 int	mac_posixshm_check_open(kauth_cred_t cred, struct pshminfo *pshm,
319 int	mac_posixshm_check_stat(kauth_cred_t cred, struct pshminfo *pshm);
320 int	mac_posixshm_check_truncate(kauth_cred_t cred, struct pshminfo *pshm,
322 int	mac_posixshm_check_unlink(kauth_cred_t cred, struct pshminfo *pshm,
324 void	mac_posixshm_vnode_label_associate(kauth_cred_t cred,
327 void	mac_posixshm_label_associate(kauth_cred_t cred,
331 int	mac_priv_check(kauth_cred_t cred, int priv);
332 int	mac_priv_grant(kauth_cred_t cred, int priv);
338 int	mac_proc_check_get_task_name(kauth_cred_t cred, struct proc *p);
339 int	mac_proc_check_get_task(kauth_cred_t cred, struct proc *p);
360 int	mac_setsockopt_label(kauth_cred_t cred, struct socket *so,
362 int     mac_socket_check_accept(kauth_cred_t cred, struct socket *so);
363 int     mac_socket_check_accepted(kauth_cred_t cred, struct socket *so);
364 int	mac_socket_check_bind(kauth_cred_t cred, struct socket *so,
366 int	mac_socket_check_connect(kauth_cred_t cred, struct socket *so,
368 int	mac_socket_check_create(kauth_cred_t cred, int domain,
371 int	mac_socket_check_kqfilter(kauth_cred_t cred, struct knote *kn,
373 int	mac_socket_check_listen(kauth_cred_t cred, struct socket *so);
374 int	mac_socket_check_receive(kauth_cred_t cred, struct socket *so);
375 int	mac_socket_check_received(kauth_cred_t cred, struct socket *so,
377 int     mac_socket_check_select(kauth_cred_t cred, struct socket *so,
379 int	mac_socket_check_send(kauth_cred_t cred, struct socket *so,
381 int	mac_socket_check_getsockopt(kauth_cred_t cred, struct socket *so,
383 int	mac_socket_check_setsockopt(kauth_cred_t cred, struct socket *so,
385 int	mac_socket_check_stat(kauth_cred_t cred, struct socket *so);
386 void	mac_socket_label_associate(kauth_cred_t cred, struct socket *so);
391 int	mac_socket_label_get(kauth_cred_t cred, struct socket *so,
397 int	mac_socketpeer_label_get(kauth_cred_t cred, struct socket *so,
399 int	mac_system_check_acct(kauth_cred_t cred, struct vnode *vp);
400 int	mac_system_check_audit(kauth_cred_t cred, void *record, int length);
401 int	mac_system_check_auditctl(kauth_cred_t cred, struct vnode *vp);
402 int	mac_system_check_auditon(kauth_cred_t cred, int cmd);
403 int	mac_system_check_chud(kauth_cred_t cred);
404 int	mac_system_check_host_priv(kauth_cred_t cred);
405 int	mac_system_check_info(kauth_cred_t, const char *info_type);
406 int	mac_system_check_nfsd(kauth_cred_t cred);
407 int	mac_system_check_reboot(kauth_cred_t cred, int howto);
408 int	mac_system_check_settime(kauth_cred_t cred);
409 int	mac_system_check_swapoff(kauth_cred_t cred, struct vnode *vp);
410 int	mac_system_check_swapon(kauth_cred_t cred, struct vnode *vp);
411 int	mac_system_check_sysctlbyname(kauth_cred_t cred, const char *namestring, int *name,
414 int	mac_system_check_kas_info(kauth_cred_t cred, int selector);
415 void	mac_sysvmsg_label_associate(kauth_cred_t cred,
419 int	mac_sysvmsq_check_enqueue(kauth_cred_t cred, struct msg *msgptr,
421 int	mac_sysvmsq_check_msgrcv(kauth_cred_t cred, struct msg *msgptr);
422 int	mac_sysvmsq_check_msgrmid(kauth_cred_t cred, struct msg *msgptr);
423 int	mac_sysvmsq_check_msqctl(kauth_cred_t cred,
425 int	mac_sysvmsq_check_msqget(kauth_cred_t cred,
427 int	mac_sysvmsq_check_msqrcv(kauth_cred_t cred,
429 int	mac_sysvmsq_check_msqsnd(kauth_cred_t cred,
431 void	mac_sysvmsq_label_associate(kauth_cred_t cred,
435 int	mac_sysvsem_check_semctl(kauth_cred_t cred,
437 int	mac_sysvsem_check_semget(kauth_cred_t cred,
439 int	mac_sysvsem_check_semop(kauth_cred_t cred,
441 void	mac_sysvsem_label_associate(kauth_cred_t cred,
446 int	mac_sysvshm_check_shmat(kauth_cred_t cred,
448 int	mac_sysvshm_check_shmctl(kauth_cred_t cred,
450 int	mac_sysvshm_check_shmdt(kauth_cred_t cred,
452 int	mac_sysvshm_check_shmget(kauth_cred_t cred,
454 void	mac_sysvshm_label_associate(kauth_cred_t cred,
487 	    kauth_cred_t file_cred, struct knote *kn, struct vnode *vp);
498 	    kauth_cred_t file_cred, struct vnode *vp);
522 	    kauth_cred_t file_cred, struct vnode *vp);
524 	    kauth_cred_t file_cred, struct vnode *vp);
531 	    kauth_cred_t file_cred, struct vnode *vp);
566 int	mac_kext_check_load(kauth_cred_t cred, const char *identifier);
567 int	mac_kext_check_unload(kauth_cred_t cred, const char *identifier);