diff options
| author | rwatson <rwatson@FreeBSD.org> | 2002-10-22 14:31:34 +0000 |
|---|---|---|
| committer | rwatson <rwatson@FreeBSD.org> | 2002-10-22 14:31:34 +0000 |
| commit | 433e63644a338a43a41eaa4d187660d3697c63ae (patch) | |
| tree | ac2846797eb26027ef08a9287e6297d480727da9 /sys/security/mac_stub/mac_stub.c | |
| parent | fdfbfa99f4afe0650a0d2edd6c71256c9dfd7f0b (diff) | |
| download | FreeBSD-src-433e63644a338a43a41eaa4d187660d3697c63ae.zip FreeBSD-src-433e63644a338a43a41eaa4d187660d3697c63ae.tar.gz | |
Adapt MAC policies for the new user API changes; teach policies how
to parse their own label elements (some cleanup to occur here in the
future to use the newly added kernel strsep()). Policies now
entirely encapsulate their notion of label in the policy module.
Approved by: re
Obtained from: TrustedBSD Project
Sponsored by: DARPA, Network Associates Laboratories
Diffstat (limited to 'sys/security/mac_stub/mac_stub.c')
| -rw-r--r-- | sys/security/mac_stub/mac_stub.c | 47 |
1 files changed, 36 insertions, 11 deletions
diff --git a/sys/security/mac_stub/mac_stub.c b/sys/security/mac_stub/mac_stub.c index 0722b25..85eb896 100644 --- a/sys/security/mac_stub/mac_stub.c +++ b/sys/security/mac_stub/mac_stub.c @@ -128,14 +128,23 @@ mac_none_destroy_label(struct label *label) } static int -mac_none_externalize(struct label *label, struct mac *extmac) +mac_none_externalize_label(struct label *label, char *element_name, + char *element_data, size_t size, size_t *len, int *claimed) { return (0); } static int -mac_none_internalize(struct label *label, struct mac *extmac) +mac_none_externalize_vnode_oldmac(struct label *label, struct oldmac *extmac) +{ + + return (0); +} + +static int +mac_none_internalize_label(struct label *label, char *element_name, + char *element_data, int *claimed) { return (0); @@ -218,7 +227,7 @@ mac_none_update_procfsvnode(struct vnode *vp, struct label *vnodelabel, static int mac_none_update_vnode_from_externalized(struct vnode *vp, - struct label *vnodelabel, struct mac *extmac) + struct label *vnodelabel, struct oldmac *extmac) { return (0); @@ -877,8 +886,6 @@ static struct mac_policy_op_entry mac_none_ops[] = (macop_t)mac_none_init_label_waitcheck }, { MAC_INIT_SOCKET_PEER_LABEL, (macop_t)mac_none_init_label_waitcheck }, - { MAC_INIT_TEMP_LABEL, - (macop_t)mac_none_init_label }, { MAC_INIT_VNODE_LABEL, (macop_t)mac_none_init_label }, { MAC_DESTROY_BPFDESC_LABEL, @@ -903,14 +910,32 @@ static struct mac_policy_op_entry mac_none_ops[] = (macop_t)mac_none_destroy_label }, { MAC_DESTROY_SOCKET_PEER_LABEL, (macop_t)mac_none_destroy_label }, - { MAC_DESTROY_TEMP_LABEL, - (macop_t)mac_none_destroy_label }, { MAC_DESTROY_VNODE_LABEL, (macop_t)mac_none_destroy_label }, - { MAC_EXTERNALIZE, - (macop_t)mac_none_externalize }, - { MAC_INTERNALIZE, - (macop_t)mac_none_internalize }, + { MAC_EXTERNALIZE_CRED_LABEL, + (macop_t)mac_none_externalize_label }, + { MAC_EXTERNALIZE_IFNET_LABEL, + (macop_t)mac_none_externalize_label }, + { MAC_EXTERNALIZE_PIPE_LABEL, + (macop_t)mac_none_externalize_label }, + { MAC_EXTERNALIZE_SOCKET_LABEL, + (macop_t)mac_none_externalize_label }, + { MAC_EXTERNALIZE_SOCKET_PEER_LABEL, + (macop_t)mac_none_externalize_label }, + { MAC_EXTERNALIZE_VNODE_LABEL, + (macop_t)mac_none_externalize_label }, + { MAC_EXTERNALIZE_VNODE_OLDMAC, + (macop_t)mac_none_externalize_vnode_oldmac }, + { MAC_INTERNALIZE_CRED_LABEL, + (macop_t)mac_none_internalize_label }, + { MAC_INTERNALIZE_IFNET_LABEL, + (macop_t)mac_none_internalize_label }, + { MAC_INTERNALIZE_PIPE_LABEL, + (macop_t)mac_none_internalize_label }, + { MAC_INTERNALIZE_SOCKET_LABEL, + (macop_t)mac_none_internalize_label }, + { MAC_INTERNALIZE_VNODE_LABEL, + (macop_t)mac_none_internalize_label }, { MAC_CREATE_DEVFS_DEVICE, (macop_t)mac_none_create_devfs_device }, { MAC_CREATE_DEVFS_DIRECTORY, |
