diff options
Diffstat (limited to 'sys/security/mac_bsdextended/mac_bsdextended.c')
| -rw-r--r-- | sys/security/mac_bsdextended/mac_bsdextended.c | 83 |
1 files changed, 28 insertions, 55 deletions
diff --git a/sys/security/mac_bsdextended/mac_bsdextended.c b/sys/security/mac_bsdextended/mac_bsdextended.c index 1435bbab4be5..b500d130115b 100644 --- a/sys/security/mac_bsdextended/mac_bsdextended.c +++ b/sys/security/mac_bsdextended/mac_bsdextended.c @@ -718,62 +718,35 @@ mac_bsdextended_check_vnode_stat(struct ucred *active_cred, VSTAT)); } -static struct mac_policy_op_entry mac_bsdextended_ops[] = +static struct mac_policy_ops mac_bsdextended_ops = { - { MAC_DESTROY, - (macop_t)mac_bsdextended_destroy }, - { MAC_INIT, - (macop_t)mac_bsdextended_init }, - { MAC_CHECK_VNODE_ACCESS, - (macop_t)mac_bsdextended_check_vnode_access }, - { MAC_CHECK_VNODE_CHDIR, - (macop_t)mac_bsdextended_check_vnode_chdir }, - { MAC_CHECK_VNODE_CHROOT, - (macop_t)mac_bsdextended_check_vnode_chroot }, - { MAC_CHECK_VNODE_CREATE, - (macop_t)mac_bsdextended_check_create_vnode }, - { MAC_CHECK_VNODE_DELETE, - (macop_t)mac_bsdextended_check_vnode_delete }, - { MAC_CHECK_VNODE_DELETEACL, - (macop_t)mac_bsdextended_check_vnode_deleteacl }, - { MAC_CHECK_VNODE_EXEC, - (macop_t)mac_bsdextended_check_vnode_exec }, - { MAC_CHECK_VNODE_GETACL, - (macop_t)mac_bsdextended_check_vnode_getacl }, - { MAC_CHECK_VNODE_GETEXTATTR, - (macop_t)mac_bsdextended_check_vnode_getextattr }, - { MAC_CHECK_VNODE_LINK, - (macop_t)mac_bsdextended_check_vnode_link }, - { MAC_CHECK_VNODE_LOOKUP, - (macop_t)mac_bsdextended_check_vnode_lookup }, - { MAC_CHECK_VNODE_OPEN, - (macop_t)mac_bsdextended_check_vnode_open }, - { MAC_CHECK_VNODE_READDIR, - (macop_t)mac_bsdextended_check_vnode_readdir }, - { MAC_CHECK_VNODE_READLINK, - (macop_t)mac_bsdextended_check_vnode_readdlink }, - { MAC_CHECK_VNODE_RENAME_FROM, - (macop_t)mac_bsdextended_check_vnode_rename_from }, - { MAC_CHECK_VNODE_RENAME_TO, - (macop_t)mac_bsdextended_check_vnode_rename_to }, - { MAC_CHECK_VNODE_REVOKE, - (macop_t)mac_bsdextended_check_vnode_revoke }, - { MAC_CHECK_VNODE_SETACL, - (macop_t)mac_bsdextended_check_setacl_vnode }, - { MAC_CHECK_VNODE_SETEXTATTR, - (macop_t)mac_bsdextended_check_vnode_setextattr }, - { MAC_CHECK_VNODE_SETFLAGS, - (macop_t)mac_bsdextended_check_vnode_setflags }, - { MAC_CHECK_VNODE_SETMODE, - (macop_t)mac_bsdextended_check_vnode_setmode }, - { MAC_CHECK_VNODE_SETOWNER, - (macop_t)mac_bsdextended_check_vnode_setowner }, - { MAC_CHECK_VNODE_SETUTIMES, - (macop_t)mac_bsdextended_check_vnode_setutimes }, - { MAC_CHECK_VNODE_STAT, - (macop_t)mac_bsdextended_check_vnode_stat }, - { MAC_OP_LAST, NULL } + .mpo_destroy = mac_bsdextended_destroy, + .mpo_init = mac_bsdextended_init, + .mpo_check_vnode_access = mac_bsdextended_check_vnode_access, + .mpo_check_vnode_chdir = mac_bsdextended_check_vnode_chdir, + .mpo_check_vnode_chroot = mac_bsdextended_check_vnode_chroot, + .mpo_check_vnode_create = mac_bsdextended_check_create_vnode, + .mpo_check_vnode_delete = mac_bsdextended_check_vnode_delete, + .mpo_check_vnode_deleteacl = mac_bsdextended_check_vnode_deleteacl, + .mpo_check_vnode_exec = mac_bsdextended_check_vnode_exec, + .mpo_check_vnode_getacl = mac_bsdextended_check_vnode_getacl, + .mpo_check_vnode_getextattr = mac_bsdextended_check_vnode_getextattr, + .mpo_check_vnode_link = mac_bsdextended_check_vnode_link, + .mpo_check_vnode_lookup = mac_bsdextended_check_vnode_lookup, + .mpo_check_vnode_open = mac_bsdextended_check_vnode_open, + .mpo_check_vnode_readdir = mac_bsdextended_check_vnode_readdir, + .mpo_check_vnode_readlink = mac_bsdextended_check_vnode_readdlink, + .mpo_check_vnode_rename_from = mac_bsdextended_check_vnode_rename_from, + .mpo_check_vnode_rename_to = mac_bsdextended_check_vnode_rename_to, + .mpo_check_vnode_revoke = mac_bsdextended_check_vnode_revoke, + .mpo_check_vnode_setacl = mac_bsdextended_check_setacl_vnode, + .mpo_check_vnode_setextattr = mac_bsdextended_check_vnode_setextattr, + .mpo_check_vnode_setflags = mac_bsdextended_check_vnode_setflags, + .mpo_check_vnode_setmode = mac_bsdextended_check_vnode_setmode, + .mpo_check_vnode_setowner = mac_bsdextended_check_vnode_setowner, + .mpo_check_vnode_setutimes = mac_bsdextended_check_vnode_setutimes, + .mpo_check_vnode_stat = mac_bsdextended_check_vnode_stat, }; -MAC_POLICY_SET(mac_bsdextended_ops, trustedbsd_mac_bsdextended, +MAC_POLICY_SET(&mac_bsdextended_ops, trustedbsd_mac_bsdextended, "TrustedBSD MAC/BSD Extended", MPC_LOADTIME_FLAG_UNLOADOK, NULL); |