aboutsummaryrefslogtreecommitdiff
path: root/sys/security/mac
diff options
context:
space:
mode:
authorRobert Watson <rwatson@FreeBSD.org>2002-10-05 18:40:10 +0000
committerRobert Watson <rwatson@FreeBSD.org>2002-10-05 18:40:10 +0000
commit74e62b1b75c300ed90ee10ab6496973d575400c1 (patch)
tree6ab685df96169b084c81758fa864ba83a468cb49 /sys/security/mac
parente8890ccc51ec57b5d7a6edd2e4539aa769d04c24 (diff)
Notes
Diffstat (limited to 'sys/security/mac')
-rw-r--r--sys/security/mac/mac_framework.c13
-rw-r--r--sys/security/mac/mac_framework.h2
-rw-r--r--sys/security/mac/mac_internal.h13
-rw-r--r--sys/security/mac/mac_net.c13
-rw-r--r--sys/security/mac/mac_pipe.c13
-rw-r--r--sys/security/mac/mac_policy.h4
-rw-r--r--sys/security/mac/mac_process.c13
-rw-r--r--sys/security/mac/mac_syscalls.c13
-rw-r--r--sys/security/mac/mac_system.c13
-rw-r--r--sys/security/mac/mac_vfs.c13
10 files changed, 110 insertions, 0 deletions
diff --git a/sys/security/mac/mac_framework.c b/sys/security/mac/mac_framework.c
index 5719b01f51e2..8a9de011ba0f 100644
--- a/sys/security/mac/mac_framework.c
+++ b/sys/security/mac/mac_framework.c
@@ -519,6 +519,10 @@ mac_policy_register(struct mac_policy_conf *mpc)
mpc->mpc_ops->mpo_create_devfs_directory =
mpe->mpe_function;
break;
+ case MAC_CREATE_DEVFS_SYMLINK:
+ mpc->mpc_ops->mpo_create_devfs_symlink =
+ mpe->mpe_function;
+ break;
case MAC_CREATE_DEVFS_VNODE:
mpc->mpc_ops->mpo_create_devfs_vnode =
mpe->mpe_function;
@@ -2946,6 +2950,15 @@ mac_create_devfs_device(dev_t dev, struct devfs_dirent *de)
MAC_PERFORM(create_devfs_device, dev, de, &de->de_label);
}
+void
+mac_create_devfs_symlink(struct ucred *cred, struct devfs_dirent *dd,
+ struct devfs_dirent *de)
+{
+
+ MAC_PERFORM(create_devfs_symlink, cred, dd, &dd->de_label, de,
+ &de->de_label);
+}
+
static int
mac_stdcreatevnode_ea(struct vnode *vp)
{
diff --git a/sys/security/mac/mac_framework.h b/sys/security/mac/mac_framework.h
index a646ad328f90..b0d04681e20f 100644
--- a/sys/security/mac/mac_framework.h
+++ b/sys/security/mac/mac_framework.h
@@ -244,6 +244,8 @@ void mac_create_devfs_device(dev_t dev, struct devfs_dirent *de);
void mac_create_devfs_directory(char *dirname, int dirnamelen,
struct devfs_dirent *de);
void mac_create_devfs_vnode(struct devfs_dirent *de, struct vnode *vp);
+void mac_create_devfs_symlink(struct ucred *cred, struct devfs_dirent *dd,
+ struct devfs_dirent *de);
void mac_create_vnode(struct ucred *cred, struct vnode *parent,
struct vnode *child);
void mac_create_mount(struct ucred *cred, struct mount *mp);
diff --git a/sys/security/mac/mac_internal.h b/sys/security/mac/mac_internal.h
index 5719b01f51e2..8a9de011ba0f 100644
--- a/sys/security/mac/mac_internal.h
+++ b/sys/security/mac/mac_internal.h
@@ -519,6 +519,10 @@ mac_policy_register(struct mac_policy_conf *mpc)
mpc->mpc_ops->mpo_create_devfs_directory =
mpe->mpe_function;
break;
+ case MAC_CREATE_DEVFS_SYMLINK:
+ mpc->mpc_ops->mpo_create_devfs_symlink =
+ mpe->mpe_function;
+ break;
case MAC_CREATE_DEVFS_VNODE:
mpc->mpc_ops->mpo_create_devfs_vnode =
mpe->mpe_function;
@@ -2946,6 +2950,15 @@ mac_create_devfs_device(dev_t dev, struct devfs_dirent *de)
MAC_PERFORM(create_devfs_device, dev, de, &de->de_label);
}
+void
+mac_create_devfs_symlink(struct ucred *cred, struct devfs_dirent *dd,
+ struct devfs_dirent *de)
+{
+
+ MAC_PERFORM(create_devfs_symlink, cred, dd, &dd->de_label, de,
+ &de->de_label);
+}
+
static int
mac_stdcreatevnode_ea(struct vnode *vp)
{
diff --git a/sys/security/mac/mac_net.c b/sys/security/mac/mac_net.c
index 5719b01f51e2..8a9de011ba0f 100644
--- a/sys/security/mac/mac_net.c
+++ b/sys/security/mac/mac_net.c
@@ -519,6 +519,10 @@ mac_policy_register(struct mac_policy_conf *mpc)
mpc->mpc_ops->mpo_create_devfs_directory =
mpe->mpe_function;
break;
+ case MAC_CREATE_DEVFS_SYMLINK:
+ mpc->mpc_ops->mpo_create_devfs_symlink =
+ mpe->mpe_function;
+ break;
case MAC_CREATE_DEVFS_VNODE:
mpc->mpc_ops->mpo_create_devfs_vnode =
mpe->mpe_function;
@@ -2946,6 +2950,15 @@ mac_create_devfs_device(dev_t dev, struct devfs_dirent *de)
MAC_PERFORM(create_devfs_device, dev, de, &de->de_label);
}
+void
+mac_create_devfs_symlink(struct ucred *cred, struct devfs_dirent *dd,
+ struct devfs_dirent *de)
+{
+
+ MAC_PERFORM(create_devfs_symlink, cred, dd, &dd->de_label, de,
+ &de->de_label);
+}
+
static int
mac_stdcreatevnode_ea(struct vnode *vp)
{
diff --git a/sys/security/mac/mac_pipe.c b/sys/security/mac/mac_pipe.c
index 5719b01f51e2..8a9de011ba0f 100644
--- a/sys/security/mac/mac_pipe.c
+++ b/sys/security/mac/mac_pipe.c
@@ -519,6 +519,10 @@ mac_policy_register(struct mac_policy_conf *mpc)
mpc->mpc_ops->mpo_create_devfs_directory =
mpe->mpe_function;
break;
+ case MAC_CREATE_DEVFS_SYMLINK:
+ mpc->mpc_ops->mpo_create_devfs_symlink =
+ mpe->mpe_function;
+ break;
case MAC_CREATE_DEVFS_VNODE:
mpc->mpc_ops->mpo_create_devfs_vnode =
mpe->mpe_function;
@@ -2946,6 +2950,15 @@ mac_create_devfs_device(dev_t dev, struct devfs_dirent *de)
MAC_PERFORM(create_devfs_device, dev, de, &de->de_label);
}
+void
+mac_create_devfs_symlink(struct ucred *cred, struct devfs_dirent *dd,
+ struct devfs_dirent *de)
+{
+
+ MAC_PERFORM(create_devfs_symlink, cred, dd, &dd->de_label, de,
+ &de->de_label);
+}
+
static int
mac_stdcreatevnode_ea(struct vnode *vp)
{
diff --git a/sys/security/mac/mac_policy.h b/sys/security/mac/mac_policy.h
index d9f1a8ed72c6..d455d3c065ba 100644
--- a/sys/security/mac/mac_policy.h
+++ b/sys/security/mac/mac_policy.h
@@ -110,6 +110,9 @@ struct mac_policy_ops {
struct label *label);
void (*mpo_create_devfs_directory)(char *dirname, int dirnamelen,
struct devfs_dirent *de, struct label *label);
+ void (*mpo_create_devfs_symlink)(struct ucred *cred,
+ struct devfs_dirent *dd, struct label *ddlabel,
+ struct devfs_dirent *de, struct label *delabel);
void (*mpo_create_devfs_vnode)(struct devfs_dirent *de,
struct label *direntlabel, struct vnode *vp,
struct label *vnodelabel);
@@ -387,6 +390,7 @@ enum mac_op_constant {
MAC_INTERNALIZE,
MAC_CREATE_DEVFS_DEVICE,
MAC_CREATE_DEVFS_DIRECTORY,
+ MAC_CREATE_DEVFS_SYMLINK,
MAC_CREATE_DEVFS_VNODE,
MAC_CREATE_VNODE,
MAC_CREATE_MOUNT,
diff --git a/sys/security/mac/mac_process.c b/sys/security/mac/mac_process.c
index 5719b01f51e2..8a9de011ba0f 100644
--- a/sys/security/mac/mac_process.c
+++ b/sys/security/mac/mac_process.c
@@ -519,6 +519,10 @@ mac_policy_register(struct mac_policy_conf *mpc)
mpc->mpc_ops->mpo_create_devfs_directory =
mpe->mpe_function;
break;
+ case MAC_CREATE_DEVFS_SYMLINK:
+ mpc->mpc_ops->mpo_create_devfs_symlink =
+ mpe->mpe_function;
+ break;
case MAC_CREATE_DEVFS_VNODE:
mpc->mpc_ops->mpo_create_devfs_vnode =
mpe->mpe_function;
@@ -2946,6 +2950,15 @@ mac_create_devfs_device(dev_t dev, struct devfs_dirent *de)
MAC_PERFORM(create_devfs_device, dev, de, &de->de_label);
}
+void
+mac_create_devfs_symlink(struct ucred *cred, struct devfs_dirent *dd,
+ struct devfs_dirent *de)
+{
+
+ MAC_PERFORM(create_devfs_symlink, cred, dd, &dd->de_label, de,
+ &de->de_label);
+}
+
static int
mac_stdcreatevnode_ea(struct vnode *vp)
{
diff --git a/sys/security/mac/mac_syscalls.c b/sys/security/mac/mac_syscalls.c
index 5719b01f51e2..8a9de011ba0f 100644
--- a/sys/security/mac/mac_syscalls.c
+++ b/sys/security/mac/mac_syscalls.c
@@ -519,6 +519,10 @@ mac_policy_register(struct mac_policy_conf *mpc)
mpc->mpc_ops->mpo_create_devfs_directory =
mpe->mpe_function;
break;
+ case MAC_CREATE_DEVFS_SYMLINK:
+ mpc->mpc_ops->mpo_create_devfs_symlink =
+ mpe->mpe_function;
+ break;
case MAC_CREATE_DEVFS_VNODE:
mpc->mpc_ops->mpo_create_devfs_vnode =
mpe->mpe_function;
@@ -2946,6 +2950,15 @@ mac_create_devfs_device(dev_t dev, struct devfs_dirent *de)
MAC_PERFORM(create_devfs_device, dev, de, &de->de_label);
}
+void
+mac_create_devfs_symlink(struct ucred *cred, struct devfs_dirent *dd,
+ struct devfs_dirent *de)
+{
+
+ MAC_PERFORM(create_devfs_symlink, cred, dd, &dd->de_label, de,
+ &de->de_label);
+}
+
static int
mac_stdcreatevnode_ea(struct vnode *vp)
{
diff --git a/sys/security/mac/mac_system.c b/sys/security/mac/mac_system.c
index 5719b01f51e2..8a9de011ba0f 100644
--- a/sys/security/mac/mac_system.c
+++ b/sys/security/mac/mac_system.c
@@ -519,6 +519,10 @@ mac_policy_register(struct mac_policy_conf *mpc)
mpc->mpc_ops->mpo_create_devfs_directory =
mpe->mpe_function;
break;
+ case MAC_CREATE_DEVFS_SYMLINK:
+ mpc->mpc_ops->mpo_create_devfs_symlink =
+ mpe->mpe_function;
+ break;
case MAC_CREATE_DEVFS_VNODE:
mpc->mpc_ops->mpo_create_devfs_vnode =
mpe->mpe_function;
@@ -2946,6 +2950,15 @@ mac_create_devfs_device(dev_t dev, struct devfs_dirent *de)
MAC_PERFORM(create_devfs_device, dev, de, &de->de_label);
}
+void
+mac_create_devfs_symlink(struct ucred *cred, struct devfs_dirent *dd,
+ struct devfs_dirent *de)
+{
+
+ MAC_PERFORM(create_devfs_symlink, cred, dd, &dd->de_label, de,
+ &de->de_label);
+}
+
static int
mac_stdcreatevnode_ea(struct vnode *vp)
{
diff --git a/sys/security/mac/mac_vfs.c b/sys/security/mac/mac_vfs.c
index 5719b01f51e2..8a9de011ba0f 100644
--- a/sys/security/mac/mac_vfs.c
+++ b/sys/security/mac/mac_vfs.c
@@ -519,6 +519,10 @@ mac_policy_register(struct mac_policy_conf *mpc)
mpc->mpc_ops->mpo_create_devfs_directory =
mpe->mpe_function;
break;
+ case MAC_CREATE_DEVFS_SYMLINK:
+ mpc->mpc_ops->mpo_create_devfs_symlink =
+ mpe->mpe_function;
+ break;
case MAC_CREATE_DEVFS_VNODE:
mpc->mpc_ops->mpo_create_devfs_vnode =
mpe->mpe_function;
@@ -2946,6 +2950,15 @@ mac_create_devfs_device(dev_t dev, struct devfs_dirent *de)
MAC_PERFORM(create_devfs_device, dev, de, &de->de_label);
}
+void
+mac_create_devfs_symlink(struct ucred *cred, struct devfs_dirent *dd,
+ struct devfs_dirent *de)
+{
+
+ MAC_PERFORM(create_devfs_symlink, cred, dd, &dd->de_label, de,
+ &de->de_label);
+}
+
static int
mac_stdcreatevnode_ea(struct vnode *vp)
{
generated by cgit v1.3 (git 2.53.0) at 2026-08-03 11:18:07 +0000