diff options
| author | bz <bz@FreeBSD.org> | 2008-10-17 12:54:28 +0000 |
|---|---|---|
| committer | bz <bz@FreeBSD.org> | 2008-10-17 12:54:28 +0000 |
| commit | 14874ad4f167cbb8503db0ed6e07a2335716d1cf (patch) | |
| tree | 16051145502fe2d8217296914207d7efee1a05a5 /sys/security/mac/mac_policy.h | |
| parent | 8e885f7f2de6daa7d3e9482c0aa90c25be08d12a (diff) | |
| download | FreeBSD-src-14874ad4f167cbb8503db0ed6e07a2335716d1cf.zip FreeBSD-src-14874ad4f167cbb8503db0ed6e07a2335716d1cf.tar.gz | |
Add mac_inpcb_check_visible MAC Framework entry point, which is similar
to mac_socket_check_visible but operates on the inpcb.
Reviewed by: rwatson
MFC after: 3 months (set timer, decide then)
Diffstat (limited to 'sys/security/mac/mac_policy.h')
| -rw-r--r-- | sys/security/mac/mac_policy.h | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/sys/security/mac/mac_policy.h b/sys/security/mac/mac_policy.h index f3104f7..63ba829 100644 --- a/sys/security/mac/mac_policy.h +++ b/sys/security/mac/mac_policy.h @@ -187,6 +187,8 @@ typedef void (*mpo_ifnet_relabel_t)(struct ucred *cred, struct ifnet *ifp, typedef int (*mpo_inpcb_check_deliver_t)(struct inpcb *inp, struct label *inplabel, struct mbuf *m, struct label *mlabel); +typedef int (*mpo_inpcb_check_visible_t)(struct ucred *cred, + struct inpcb *inp, struct label *inplabel); typedef void (*mpo_inpcb_create_t)(struct socket *so, struct label *solabel, struct inpcb *inp, struct label *inplabel); @@ -689,6 +691,7 @@ struct mac_policy_ops { mpo_ifnet_relabel_t mpo_ifnet_relabel; mpo_inpcb_check_deliver_t mpo_inpcb_check_deliver; + mpo_inpcb_check_visible_t mpo_inpcb_check_visible; mpo_inpcb_create_t mpo_inpcb_create; mpo_inpcb_create_mbuf_t mpo_inpcb_create_mbuf; mpo_inpcb_destroy_label_t mpo_inpcb_destroy_label; |
