security/mac/mac_policy.h

131 typedef void	(*mpo_bpfdesc_create_t)(struct ucred *cred,
139 typedef void	(*mpo_cred_associate_nfsd_t)(struct ucred *cred);
140 typedef int	(*mpo_cred_check_relabel_t)(struct ucred *cred,
142 typedef int	(*mpo_cred_check_setaudit_t)(struct ucred *cred,
144 typedef int	(*mpo_cred_check_setaudit_addr_t)(struct ucred *cred,
146 typedef int	(*mpo_cred_check_setauid_t)(struct ucred *cred, uid_t auid);
147 typedef int	(*mpo_cred_check_setegid_t)(struct ucred *cred, gid_t egid);
148 typedef int	(*mpo_cred_check_seteuid_t)(struct ucred *cred, uid_t euid);
149 typedef int	(*mpo_cred_check_setgid_t)(struct ucred *cred, gid_t gid);
150 typedef int	(*mpo_cred_check_setgroups_t)(struct ucred *cred, int ngroups,
152 typedef int	(*mpo_cred_check_setregid_t)(struct ucred *cred, gid_t rgid,
154 typedef int	(*mpo_cred_check_setresgid_t)(struct ucred *cred, gid_t rgid,
156 typedef int	(*mpo_cred_check_setresuid_t)(struct ucred *cred, uid_t ruid,
158 typedef int	(*mpo_cred_check_setreuid_t)(struct ucred *cred, uid_t ruid,
160 typedef int	(*mpo_cred_check_setuid_t)(struct ucred *cred, uid_t uid);
165 typedef void	(*mpo_cred_create_init_t)(struct ucred *cred);
166 typedef void	(*mpo_cred_create_swapper_t)(struct ucred *cred);
173 typedef void	(*mpo_cred_relabel_t)(struct ucred *cred,
182 typedef void	(*mpo_devfs_create_device_t)(struct ucred *cred,
188 typedef void	(*mpo_devfs_create_symlink_t)(struct ucred *cred,
202 typedef int	(*mpo_ifnet_check_relabel_t)(struct ucred *cred,
221 typedef void	(*mpo_ifnet_relabel_t)(struct ucred *cred, struct ifnet *ifp,
227 typedef int	(*mpo_inpcb_check_visible_t)(struct ucred *cred,
253 typedef int	(*mpo_ip4_check_jail_t)(struct ucred *cred,
255 typedef int	(*mpo_ip6_check_jail_t)(struct ucred *cred,
271 typedef int	(*mpo_kenv_check_dump_t)(struct ucred *cred);
272 typedef int	(*mpo_kenv_check_get_t)(struct ucred *cred, char *name);
273 typedef int	(*mpo_kenv_check_set_t)(struct ucred *cred, char *name,
275 typedef int	(*mpo_kenv_check_unset_t)(struct ucred *cred, char *name);
277 typedef int	(*mpo_kld_check_load_t)(struct ucred *cred, struct vnode *vp,
279 typedef int	(*mpo_kld_check_stat_t)(struct ucred *cred);
286 typedef int	(*mpo_mount_check_stat_t)(struct ucred *cred,
288 typedef void	(*mpo_mount_create_t)(struct ucred *cred, struct mount *mp,
319 typedef int	(*mpo_pipe_check_ioctl_t)(struct ucred *cred,
322 typedef int	(*mpo_pipe_check_poll_t)(struct ucred *cred,
324 typedef int	(*mpo_pipe_check_read_t)(struct ucred *cred,
326 typedef int	(*mpo_pipe_check_relabel_t)(struct ucred *cred,
329 typedef int	(*mpo_pipe_check_stat_t)(struct ucred *cred,
331 typedef int	(*mpo_pipe_check_write_t)(struct ucred *cred,
335 typedef void	(*mpo_pipe_create_t)(struct ucred *cred, struct pipepair *pp,
343 typedef void	(*mpo_pipe_relabel_t)(struct ucred *cred, struct pipepair *pp,
349 typedef int	(*mpo_posixsem_check_open_t)(struct ucred *cred,
354 typedef int	(*mpo_posixsem_check_setmode_t)(struct ucred *cred,
357 typedef int	(*mpo_posixsem_check_setowner_t)(struct ucred *cred,
363 typedef int	(*mpo_posixsem_check_unlink_t)(struct ucred *cred,
368 typedef void	(*mpo_posixsem_create_t)(struct ucred *cred,
373 typedef int	(*mpo_posixshm_check_create_t)(struct ucred *cred,
375 typedef int	(*mpo_posixshm_check_mmap_t)(struct ucred *cred,
378 typedef int	(*mpo_posixshm_check_open_t)(struct ucred *cred,
384 typedef int	(*mpo_posixshm_check_setmode_t)(struct ucred *cred,
387 typedef int	(*mpo_posixshm_check_setowner_t)(struct ucred *cred,
396 typedef int	(*mpo_posixshm_check_unlink_t)(struct ucred *cred,
401 typedef void	(*mpo_posixshm_create_t)(struct ucred *cred,
406 typedef int	(*mpo_priv_check_t)(struct ucred *cred, int priv);
407 typedef int	(*mpo_priv_grant_t)(struct ucred *cred, int priv);
409 typedef int	(*mpo_proc_check_debug_t)(struct ucred *cred,
411 typedef int	(*mpo_proc_check_sched_t)(struct ucred *cred,
413 typedef int	(*mpo_proc_check_signal_t)(struct ucred *cred,
415 typedef int	(*mpo_proc_check_wait_t)(struct ucred *cred,
420 typedef int	(*mpo_socket_check_accept_t)(struct ucred *cred,
422 typedef int	(*mpo_socket_check_bind_t)(struct ucred *cred,
425 typedef int	(*mpo_socket_check_connect_t)(struct ucred *cred,
428 typedef int	(*mpo_socket_check_create_t)(struct ucred *cred, int domain,
433 typedef int	(*mpo_socket_check_listen_t)(struct ucred *cred,
435 typedef int	(*mpo_socket_check_poll_t)(struct ucred *cred,
437 typedef int	(*mpo_socket_check_receive_t)(struct ucred *cred,
439 typedef int	(*mpo_socket_check_relabel_t)(struct ucred *cred,
442 typedef int	(*mpo_socket_check_send_t)(struct ucred *cred,
444 typedef int	(*mpo_socket_check_stat_t)(struct ucred *cred,
446 typedef int	(*mpo_socket_check_visible_t)(struct ucred *cred,
450 typedef void	(*mpo_socket_create_t)(struct ucred *cred, struct socket *so,
464 typedef void	(*mpo_socket_relabel_t)(struct ucred *cred, struct socket *so,
486 typedef int	(*mpo_system_check_acct_t)(struct ucred *cred,
488 typedef int	(*mpo_system_check_audit_t)(struct ucred *cred, void *record,
490 typedef int	(*mpo_system_check_auditctl_t)(struct ucred *cred,
492 typedef int	(*mpo_system_check_auditon_t)(struct ucred *cred, int cmd);
493 typedef int	(*mpo_system_check_reboot_t)(struct ucred *cred, int howto);
494 typedef int	(*mpo_system_check_swapon_t)(struct ucred *cred,
496 typedef int	(*mpo_system_check_swapoff_t)(struct ucred *cred,
498 typedef int	(*mpo_system_check_sysctl_t)(struct ucred *cred,
503 typedef void	(*mpo_sysvmsg_create_t)(struct ucred *cred,
509 typedef int	(*mpo_sysvmsq_check_msgmsq_t)(struct ucred *cred,
512 typedef int	(*mpo_sysvmsq_check_msgrcv_t)(struct ucred *cred,
514 typedef int	(*mpo_sysvmsq_check_msgrmid_t)(struct ucred *cred,
516 typedef int	(*mpo_sysvmsq_check_msqget_t)(struct ucred *cred,
518 typedef int	(*mpo_sysvmsq_check_msqctl_t)(struct ucred *cred,
521 typedef int	(*mpo_sysvmsq_check_msqrcv_t)(struct ucred *cred,
523 typedef int	(*mpo_sysvmsq_check_msqsnd_t)(struct ucred *cred,
526 typedef void	(*mpo_sysvmsq_create_t)(struct ucred *cred,
531 typedef int	(*mpo_sysvsem_check_semctl_t)(struct ucred *cred,
534 typedef int	(*mpo_sysvsem_check_semget_t)(struct ucred *cred,
536 typedef int	(*mpo_sysvsem_check_semop_t)(struct ucred *cred,
540 typedef void	(*mpo_sysvsem_create_t)(struct ucred *cred,
545 typedef int	(*mpo_sysvshm_check_shmat_t)(struct ucred *cred,
548 typedef int	(*mpo_sysvshm_check_shmctl_t)(struct ucred *cred,
551 typedef int	(*mpo_sysvshm_check_shmdt_t)(struct ucred *cred,
554 typedef int	(*mpo_sysvshm_check_shmget_t)(struct ucred *cred,
558 typedef void	(*mpo_sysvshm_create_t)(struct ucred *cred,
571 typedef int	(*mpo_vnode_check_access_t)(struct ucred *cred,
574 typedef int	(*mpo_vnode_check_chdir_t)(struct ucred *cred,
576 typedef int	(*mpo_vnode_check_chroot_t)(struct ucred *cred,
578 typedef int	(*mpo_vnode_check_create_t)(struct ucred *cred,
581 typedef int	(*mpo_vnode_check_deleteacl_t)(struct ucred *cred,
584 typedef int	(*mpo_vnode_check_deleteextattr_t)(struct ucred *cred,
587 typedef int	(*mpo_vnode_check_exec_t)(struct ucred *cred,
590 typedef int	(*mpo_vnode_check_getacl_t)(struct ucred *cred,
593 typedef int	(*mpo_vnode_check_getextattr_t)(struct ucred *cred,
596 typedef int	(*mpo_vnode_check_link_t)(struct ucred *cred,
600 typedef int	(*mpo_vnode_check_listextattr_t)(struct ucred *cred,
603 typedef int	(*mpo_vnode_check_lookup_t)(struct ucred *cred,
606 typedef int	(*mpo_vnode_check_mmap_t)(struct ucred *cred,
609 typedef void	(*mpo_vnode_check_mmap_downgrade_t)(struct ucred *cred,
611 typedef int	(*mpo_vnode_check_mprotect_t)(struct ucred *cred,
613 typedef int	(*mpo_vnode_check_open_t)(struct ucred *cred,
622 typedef int	(*mpo_vnode_check_readdir_t)(struct ucred *cred,
624 typedef int	(*mpo_vnode_check_readlink_t)(struct ucred *cred,
626 typedef int	(*mpo_vnode_check_relabel_t)(struct ucred *cred,
629 typedef int	(*mpo_vnode_check_rename_from_t)(struct ucred *cred,
633 typedef int	(*mpo_vnode_check_rename_to_t)(struct ucred *cred,
637 typedef int	(*mpo_vnode_check_revoke_t)(struct ucred *cred,
639 typedef int	(*mpo_vnode_check_setacl_t)(struct ucred *cred,
642 typedef int	(*mpo_vnode_check_setextattr_t)(struct ucred *cred,
645 typedef int	(*mpo_vnode_check_setflags_t)(struct ucred *cred,
647 typedef int	(*mpo_vnode_check_setmode_t)(struct ucred *cred,
649 typedef int	(*mpo_vnode_check_setowner_t)(struct ucred *cred,
652 typedef int	(*mpo_vnode_check_setutimes_t)(struct ucred *cred,
658 typedef int	(*mpo_vnode_check_unlink_t)(struct ucred *cred,
667 typedef int	(*mpo_vnode_create_extattr_t)(struct ucred *cred,
686 typedef void	(*mpo_vnode_relabel_t)(struct ucred *cred, struct vnode *vp,
688 typedef int	(*mpo_vnode_setlabel_extattr_t)(struct ucred *cred,