The Design and Implementation of the FreeBSD Operating System, Second Edition
Now available: The Design and Implementation of the FreeBSD Operating System (Second Edition)


[ source navigation ] [ diff markup ] [ identifier search ] [ freetext search ] [ file search ] [ list types ] [ track identifier ]

FreeBSD/Linux Kernel Cross Reference
sys/security/mac_stub/mac_stub.c

Version: -  FREEBSD  -  FREEBSD-13-STABLE  -  FREEBSD-13-0  -  FREEBSD-12-STABLE  -  FREEBSD-12-0  -  FREEBSD-11-STABLE  -  FREEBSD-11-0  -  FREEBSD-10-STABLE  -  FREEBSD-10-0  -  FREEBSD-9-STABLE  -  FREEBSD-9-0  -  FREEBSD-8-STABLE  -  FREEBSD-8-0  -  FREEBSD-7-STABLE  -  FREEBSD-7-0  -  FREEBSD-6-STABLE  -  FREEBSD-6-0  -  FREEBSD-5-STABLE  -  FREEBSD-5-0  -  FREEBSD-4-STABLE  -  FREEBSD-3-STABLE  -  FREEBSD22  -  l41  -  OPENBSD  -  linux-2.6  -  MK84  -  PLAN9  -  xnu-8792 
SearchContext: -  none  -  3  -  10 

    1 /*-
    2  * Copyright (c) 1999-2002, 2007-2011 Robert N. M. Watson
    3  * Copyright (c) 2001-2005 McAfee, Inc.
    4  * Copyright (c) 2005-2006 SPARTA, Inc.
    5  * Copyright (c) 2008 Apple Inc.
    6  * All rights reserved.
    7  *
    8  * This software was developed by Robert Watson for the TrustedBSD Project.
    9  *
   10  * This software was developed for the FreeBSD Project in part by McAfee
   11  * Research, the Security Research Division of McAfee, Inc. under
   12  * DARPA/SPAWAR contract N66001-01-C-8035 ("CBOSS"), as part of the DARPA
   13  * CHATS research program.
   14  *
   15  * This software was enhanced by SPARTA ISSO under SPAWAR contract
   16  * N66001-04-C-6019 ("SEFOS").
   17  *
   18  * This software was developed at the University of Cambridge Computer
   19  * Laboratory with support from a grant from Google, Inc.
   20  *
   21  * Redistribution and use in source and binary forms, with or without
   22  * modification, are permitted provided that the following conditions
   23  * are met:
   24  * 1. Redistributions of source code must retain the above copyright
   25  *    notice, this list of conditions and the following disclaimer.
   26  * 2. Redistributions in binary form must reproduce the above copyright
   27  *    notice, this list of conditions and the following disclaimer in the
   28  *    documentation and/or other materials provided with the distribution.
   29  *
   30  * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND
   31  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
   32  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
   33  * ARE DISCLAIMED.  IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
   34  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
   35  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
   36  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
   37  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
   38  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
   39  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
   40  * SUCH DAMAGE.
   41  *
   42  * $FreeBSD$
   43  */
   44 
   45 /*
   46  * Developed by the TrustedBSD Project.
   47  *
   48  * Stub module that implements a NOOP for most (if not all) MAC Framework
   49  * policy entry points.
   50  */
   51 
   52 #include <sys/types.h>
   53 #include <sys/param.h>
   54 #include <sys/acl.h>
   55 #include <sys/conf.h>
   56 #include <sys/extattr.h>
   57 #include <sys/kernel.h>
   58 #include <sys/ksem.h>
   59 #include <sys/mount.h>
   60 #include <sys/proc.h>
   61 #include <sys/systm.h>
   62 #include <sys/sysproto.h>
   63 #include <sys/sysent.h>
   64 #include <sys/vnode.h>
   65 #include <sys/file.h>
   66 #include <sys/socket.h>
   67 #include <sys/socketvar.h>
   68 #include <sys/pipe.h>
   69 #include <sys/sx.h>
   70 #include <sys/sysctl.h>
   71 #include <sys/msg.h>
   72 #include <sys/sem.h>
   73 #include <sys/shm.h>
   74 
   75 #include <fs/devfs/devfs.h>
   76 
   77 #include <net/bpfdesc.h>
   78 #include <net/if.h>
   79 #include <net/if_types.h>
   80 #include <net/if_var.h>
   81 
   82 #include <netinet/in.h>
   83 #include <netinet/in_pcb.h>
   84 #include <netinet/ip_var.h>
   85 
   86 #include <vm/vm.h>
   87 
   88 #include <security/mac/mac_policy.h>
   89 
   90 SYSCTL_DECL(_security_mac);
   91 
   92 static SYSCTL_NODE(_security_mac, OID_AUTO, stub,
   93     CTLFLAG_RW | CTLFLAG_MPSAFE, 0,
   94     "TrustedBSD mac_stub policy controls");
   95 
   96 static int      stub_enabled = 1;
   97 SYSCTL_INT(_security_mac_stub, OID_AUTO, enabled, CTLFLAG_RW,
   98     &stub_enabled, 0, "Enforce mac_stub policy");
   99 
  100 /*
  101  * Policy module operations.
  102  */
  103 static void
  104 stub_destroy(struct mac_policy_conf *conf)
  105 {
  106 
  107 }
  108 
  109 static void
  110 stub_init(struct mac_policy_conf *conf)
  111 {
  112 
  113 }
  114 
  115 static int
  116 stub_syscall(struct thread *td, int call, void *arg)
  117 {
  118 
  119         return (0);
  120 }
  121 
  122 /*
  123  * Label operations.
  124  */
  125 static void
  126 stub_init_label(struct label *label)
  127 {
  128 
  129 }
  130 
  131 static int
  132 stub_init_label_waitcheck(struct label *label, int flag)
  133 {
  134 
  135         return (0);
  136 }
  137 
  138 static void
  139 stub_destroy_label(struct label *label)
  140 {
  141 
  142 }
  143 
  144 static void
  145 stub_copy_label(struct label *src, struct label *dest)
  146 {
  147 
  148 }
  149 
  150 static int
  151 stub_externalize_label(struct label *label, char *element_name,
  152     struct sbuf *sb, int *claimed)
  153 {
  154 
  155         return (0);
  156 }
  157 
  158 static int
  159 stub_internalize_label(struct label *label, char *element_name,
  160     char *element_data, int *claimed)
  161 {
  162 
  163         return (0);
  164 }
  165 
  166 /*
  167  * Object-specific entry point imeplementations are sorted alphabetically by
  168  * object type name and then by operation.
  169  */
  170 static int
  171 stub_bpfdesc_check_receive(struct bpf_d *d, struct label *dlabel,
  172     struct ifnet *ifp, struct label *ifplabel)
  173 {
  174 
  175         return (0);
  176 }
  177 
  178 static void
  179 stub_bpfdesc_create(struct ucred *cred, struct bpf_d *d,
  180     struct label *dlabel)
  181 {
  182 
  183 }
  184 
  185 static void
  186 stub_bpfdesc_create_mbuf(struct bpf_d *d, struct label *dlabel,
  187     struct mbuf *m, struct label *mlabel)
  188 {
  189 
  190 }
  191 
  192 static void
  193 stub_cred_associate_nfsd(struct ucred *cred)
  194 {
  195 
  196 }
  197 
  198 static int
  199 stub_cred_check_relabel(struct ucred *cred, struct label *newlabel)
  200 {
  201 
  202         return (0);
  203 }
  204 
  205 static int
  206 stub_cred_check_setaudit(struct ucred *cred, struct auditinfo *ai)
  207 {
  208 
  209         return (0);
  210 }
  211 
  212 static int
  213 stub_cred_check_setaudit_addr(struct ucred *cred, struct auditinfo_addr *aia)
  214 {
  215 
  216         return (0);
  217 }
  218 
  219 static int
  220 stub_cred_check_setauid(struct ucred *cred, uid_t auid)
  221 {
  222 
  223         return (0);
  224 }
  225 
  226 static int
  227 stub_cred_check_setegid(struct ucred *cred, gid_t egid)
  228 {
  229 
  230         return (0);
  231 }
  232 
  233 static int
  234 stub_cred_check_seteuid(struct ucred *cred, uid_t euid)
  235 {
  236 
  237         return (0);
  238 }
  239 
  240 static int
  241 stub_cred_check_setgid(struct ucred *cred, gid_t gid)
  242 {
  243 
  244         return (0);
  245 }
  246 
  247 static int
  248 stub_cred_check_setgroups(struct ucred *cred, int ngroups,
  249         gid_t *gidset)
  250 {
  251 
  252         return (0);
  253 }
  254 
  255 static int
  256 stub_cred_check_setregid(struct ucred *cred, gid_t rgid, gid_t egid)
  257 {
  258 
  259         return (0);
  260 }
  261 
  262 static int
  263 stub_cred_check_setresgid(struct ucred *cred, gid_t rgid, gid_t egid,
  264         gid_t sgid)
  265 {
  266 
  267         return (0);
  268 }
  269 
  270 static int
  271 stub_cred_check_setresuid(struct ucred *cred, uid_t ruid, uid_t euid,
  272         uid_t suid)
  273 {
  274 
  275         return (0);
  276 }
  277 
  278 static int
  279 stub_cred_check_setreuid(struct ucred *cred, uid_t ruid, uid_t euid)
  280 {
  281 
  282         return (0);
  283 }
  284 
  285 static int
  286 stub_cred_check_setuid(struct ucred *cred, uid_t uid)
  287 {
  288 
  289         return (0);
  290 }
  291 
  292 static int
  293 stub_cred_check_visible(struct ucred *cr1, struct ucred *cr2)
  294 {
  295 
  296         return (0);
  297 }
  298 
  299 static void
  300 stub_cred_create_init(struct ucred *cred)
  301 {
  302 
  303 }
  304 
  305 static void
  306 stub_cred_create_swapper(struct ucred *cred)
  307 {
  308 
  309 }
  310 
  311 static void
  312 stub_cred_relabel(struct ucred *cred, struct label *newlabel)
  313 {
  314 
  315 }
  316 
  317 static void
  318 stub_devfs_create_device(struct ucred *cred, struct mount *mp,
  319     struct cdev *dev, struct devfs_dirent *de, struct label *delabel)
  320 {
  321 
  322 }
  323 
  324 static void
  325 stub_devfs_create_directory(struct mount *mp, char *dirname,
  326     int dirnamelen, struct devfs_dirent *de, struct label *delabel)
  327 {
  328 
  329 }
  330 
  331 static void
  332 stub_devfs_create_symlink(struct ucred *cred, struct mount *mp,
  333     struct devfs_dirent *dd, struct label *ddlabel, struct devfs_dirent *de,
  334     struct label *delabel)
  335 {
  336 
  337 }
  338 
  339 static void
  340 stub_devfs_update(struct mount *mp, struct devfs_dirent *de,
  341     struct label *delabel, struct vnode *vp, struct label *vplabel)
  342 {
  343 
  344 }
  345 
  346 static void
  347 stub_devfs_vnode_associate(struct mount *mp, struct label *mplabel,
  348     struct devfs_dirent *de, struct label *delabel, struct vnode *vp,
  349     struct label *vplabel)
  350 {
  351 
  352 }
  353 
  354 static int
  355 stub_ifnet_check_relabel(struct ucred *cred, struct ifnet *ifp,
  356     struct label *ifplabel, struct label *newlabel)
  357 {
  358 
  359         return (0);
  360 }
  361 
  362 static int
  363 stub_ifnet_check_transmit(struct ifnet *ifp, struct label *ifplabel,
  364     struct mbuf *m, struct label *mlabel)
  365 {
  366 
  367         return (0);
  368 }
  369 
  370 static void
  371 stub_ifnet_create(struct ifnet *ifp, struct label *ifplabel)
  372 {
  373 
  374 }
  375 
  376 static void
  377 stub_ifnet_create_mbuf(struct ifnet *ifp, struct label *ifplabel,
  378     struct mbuf *m, struct label *mlabel)
  379 {
  380 
  381 }
  382 
  383 static void
  384 stub_ifnet_relabel(struct ucred *cred, struct ifnet *ifp,
  385     struct label *ifplabel, struct label *newlabel)
  386 {
  387 
  388 }
  389 
  390 static int
  391 stub_inpcb_check_deliver(struct inpcb *inp, struct label *inplabel,
  392     struct mbuf *m, struct label *mlabel)
  393 {
  394 
  395         return (0);
  396 }
  397 
  398 static void
  399 stub_inpcb_create(struct socket *so, struct label *solabel,
  400     struct inpcb *inp, struct label *inplabel)
  401 {
  402 
  403 }
  404 
  405 static void
  406 stub_inpcb_create_mbuf(struct inpcb *inp, struct label *inplabel,
  407     struct mbuf *m, struct label *mlabel)
  408 {
  409 
  410 }
  411 
  412 static void
  413 stub_inpcb_sosetlabel(struct socket *so, struct label *solabel,
  414     struct inpcb *inp, struct label *inplabel)
  415 {
  416 
  417         SOCK_LOCK_ASSERT(so);
  418 
  419 }
  420 
  421 static void
  422 stub_ip6q_create(struct mbuf *m, struct label *mlabel, struct ip6q *q6,
  423     struct label *q6label)
  424 {
  425 
  426 }
  427 
  428 static int
  429 stub_ip6q_match(struct mbuf *m, struct label *mlabel, struct ip6q *q6,
  430     struct label *q6label)
  431 {
  432 
  433         return (1);
  434 }
  435 
  436 static void
  437 stub_ip6q_reassemble(struct ip6q *q6, struct label *q6label, struct mbuf *m,
  438     struct label *mlabel)
  439 {
  440 
  441 }
  442 
  443 static void
  444 stub_ip6q_update(struct mbuf *m, struct label *mlabel, struct ip6q *q6,
  445     struct label *q6label)
  446 {
  447 
  448 }
  449 
  450 static void
  451 stub_ipq_create(struct mbuf *m, struct label *mlabel, struct ipq *q,
  452     struct label *qlabel)
  453 {
  454 
  455 }
  456 
  457 static int
  458 stub_ipq_match(struct mbuf *m, struct label *mlabel, struct ipq *q,
  459     struct label *qlabel)
  460 {
  461 
  462         return (1);
  463 }
  464 
  465 static void
  466 stub_ipq_reassemble(struct ipq *q, struct label *qlabel, struct mbuf *m,
  467     struct label *mlabel)
  468 {
  469 
  470 }
  471 
  472 static void
  473 stub_ipq_update(struct mbuf *m, struct label *mlabel, struct ipq *q,
  474     struct label *qlabel)
  475 {
  476 
  477 }
  478 
  479 static int
  480 stub_kenv_check_dump(struct ucred *cred)
  481 {
  482 
  483         return (0);
  484 }
  485 
  486 static int
  487 stub_kenv_check_get(struct ucred *cred, char *name)
  488 {
  489 
  490         return (0);
  491 }
  492 
  493 static int
  494 stub_kenv_check_set(struct ucred *cred, char *name, char *value)
  495 {
  496 
  497         return (0);
  498 }
  499 
  500 static int
  501 stub_kenv_check_unset(struct ucred *cred, char *name)
  502 {
  503 
  504         return (0);
  505 }
  506 
  507 static int
  508 stub_kld_check_load(struct ucred *cred, struct vnode *vp,
  509     struct label *vplabel)
  510 {
  511 
  512         return (0);
  513 }
  514 
  515 static int
  516 stub_kld_check_stat(struct ucred *cred)
  517 {
  518 
  519         return (0);
  520 }
  521 
  522 static int
  523 stub_mount_check_stat(struct ucred *cred, struct mount *mp,
  524     struct label *mplabel)
  525 {
  526 
  527         return (0);
  528 }
  529 
  530 static void
  531 stub_mount_create(struct ucred *cred, struct mount *mp,
  532     struct label *mplabel)
  533 {
  534 
  535 }
  536 
  537 static void
  538 stub_netinet_arp_send(struct ifnet *ifp, struct label *iflpabel,
  539     struct mbuf *m, struct label *mlabel)
  540 {
  541 
  542 }
  543 
  544 static void
  545 stub_netinet_firewall_reply(struct mbuf *mrecv, struct label *mrecvlabel,
  546     struct mbuf *msend, struct label *msendlabel)
  547 {
  548 
  549 }
  550 
  551 static void
  552 stub_netinet_firewall_send(struct mbuf *m, struct label *mlabel)
  553 {
  554 
  555 }
  556 
  557 static void
  558 stub_netinet_fragment(struct mbuf *m, struct label *mlabel, struct mbuf *frag,
  559     struct label *fraglabel)
  560 {
  561 
  562 }
  563 
  564 static void
  565 stub_netinet_icmp_reply(struct mbuf *mrecv, struct label *mrecvlabel,
  566     struct mbuf *msend, struct label *msendlabel)
  567 {
  568 
  569 }
  570 
  571 static void
  572 stub_netinet_icmp_replyinplace(struct mbuf *m, struct label *mlabel)
  573 {
  574 
  575 }
  576 
  577 static void
  578 stub_netinet_igmp_send(struct ifnet *ifp, struct label *iflpabel,
  579     struct mbuf *m, struct label *mlabel)
  580 {
  581 
  582 }
  583 
  584 static void
  585 stub_netinet_tcp_reply(struct mbuf *m, struct label *mlabel)
  586 {
  587 
  588 }
  589 
  590 static void
  591 stub_netinet6_nd6_send(struct ifnet *ifp, struct label *iflpabel,
  592     struct mbuf *m, struct label *mlabel)
  593 {
  594 
  595 }
  596 
  597 static int
  598 stub_pipe_check_ioctl(struct ucred *cred, struct pipepair *pp,
  599     struct label *pplabel, unsigned long cmd, void /* caddr_t */ *data)
  600 {
  601 
  602         return (0);
  603 }
  604 
  605 static int
  606 stub_pipe_check_poll(struct ucred *cred, struct pipepair *pp,
  607     struct label *pplabel)
  608 {
  609 
  610         return (0);
  611 }
  612 
  613 static int
  614 stub_pipe_check_read(struct ucred *cred, struct pipepair *pp,
  615     struct label *pplabel)
  616 {
  617 
  618         return (0);
  619 }
  620 
  621 static int
  622 stub_pipe_check_relabel(struct ucred *cred, struct pipepair *pp,
  623     struct label *pplabel, struct label *newlabel)
  624 {
  625 
  626         return (0);
  627 }
  628 
  629 static int
  630 stub_pipe_check_stat(struct ucred *cred, struct pipepair *pp,
  631     struct label *pplabel)
  632 {
  633 
  634         return (0);
  635 }
  636 
  637 static int
  638 stub_pipe_check_write(struct ucred *cred, struct pipepair *pp,
  639     struct label *pplabel)
  640 {
  641 
  642         return (0);
  643 }
  644 
  645 static void
  646 stub_pipe_create(struct ucred *cred, struct pipepair *pp,
  647     struct label *pplabel)
  648 {
  649 
  650 }
  651 
  652 static void
  653 stub_pipe_relabel(struct ucred *cred, struct pipepair *pp,
  654     struct label *pplabel, struct label *newlabel)
  655 {
  656 
  657 }
  658 
  659 static int
  660 stub_posixsem_check_getvalue(struct ucred *active_cred, struct ucred *file_cred,
  661     struct ksem *ks, struct label *kslabel)
  662 {
  663 
  664         return (0);
  665 }
  666 
  667 static int
  668 stub_posixsem_check_open(struct ucred *cred, struct ksem *ks,
  669     struct label *kslabel)
  670 {
  671 
  672         return (0);
  673 }
  674 
  675 static int
  676 stub_posixsem_check_post(struct ucred *active_cred, struct ucred *file_cred,
  677     struct ksem *ks, struct label *kslabel)
  678 {
  679 
  680         return (0);
  681 }
  682 
  683 static int
  684 stub_posixsem_check_setmode(struct ucred *cred, struct ksem *ks,
  685     struct label *kslabel, mode_t mode)
  686 {
  687 
  688         return (0);
  689 }
  690 
  691 static int
  692 stub_posixsem_check_setowner(struct ucred *cred, struct ksem *ks,
  693     struct label *kslabel, uid_t uid, gid_t gid)
  694 {
  695 
  696         return (0);
  697 }
  698 
  699 static int
  700 stub_posixsem_check_stat(struct ucred *active_cred, struct ucred *file_cred,
  701     struct ksem *ks, struct label *kslabel)
  702 {
  703 
  704         return (0);
  705 }
  706 
  707 static int
  708 stub_posixsem_check_unlink(struct ucred *cred, struct ksem *ks,
  709     struct label *kslabel)
  710 {
  711 
  712         return (0);
  713 }
  714 
  715 static int
  716 stub_posixsem_check_wait(struct ucred *active_cred, struct ucred *file_cred,
  717     struct ksem *ks, struct label *kslabel)
  718 {
  719 
  720         return (0);
  721 }
  722 
  723 static void
  724 stub_posixsem_create(struct ucred *cred, struct ksem *ks,
  725     struct label *kslabel)
  726 {
  727 
  728 }
  729 
  730 static int
  731 stub_posixshm_check_create(struct ucred *cred, const char *path)
  732 {
  733 
  734         return (0);
  735 }
  736 
  737 static int
  738 stub_posixshm_check_mmap(struct ucred *cred, struct shmfd *shmfd,
  739     struct label *shmlabel, int prot, int flags)
  740 {
  741 
  742         return (0);
  743 }
  744 
  745 static int
  746 stub_posixshm_check_open(struct ucred *cred, struct shmfd *shmfd,
  747     struct label *shmlabel, accmode_t accmode)
  748 {
  749 
  750         return (0);
  751 }
  752 
  753 static int
  754 stub_posixshm_check_read(struct ucred *active_cred, struct ucred *file_cred,
  755     struct shmfd *shm, struct label *shmlabel)
  756 {
  757 
  758         return (0);
  759 }
  760 
  761 static int
  762 stub_posixshm_check_setmode(struct ucred *cred, struct shmfd *shmfd,
  763     struct label *shmlabel, mode_t mode)
  764 {
  765 
  766         return (0);
  767 }
  768 
  769 static int
  770 stub_posixshm_check_setowner(struct ucred *cred, struct shmfd *shmfd,
  771     struct label *shmlabel, uid_t uid, gid_t gid)
  772 {
  773 
  774         return (0);
  775 }
  776 
  777 static int
  778 stub_posixshm_check_stat(struct ucred *active_cred, struct ucred *file_cred,
  779     struct shmfd *shmfd, struct label *shmlabel)
  780 {
  781 
  782         return (0);
  783 }
  784 
  785 static int
  786 stub_posixshm_check_truncate(struct ucred *active_cred,
  787     struct ucred *file_cred, struct shmfd *shmfd, struct label *shmlabel)
  788 {
  789 
  790         return (0);
  791 }
  792 
  793 static int
  794 stub_posixshm_check_unlink(struct ucred *cred, struct shmfd *shmfd,
  795     struct label *shmlabel)
  796 {
  797 
  798         return (0);
  799 }
  800 
  801 static int
  802 stub_posixshm_check_write(struct ucred *active_cred, struct ucred *file_cred,
  803     struct shmfd *shm, struct label *shmlabel)
  804 {
  805 
  806         return (0);
  807 }
  808 
  809 static void
  810 stub_posixshm_create(struct ucred *cred, struct shmfd *shmfd,
  811     struct label *shmlabel)
  812 {
  813 
  814 }
  815 
  816 static int
  817 stub_priv_check(struct ucred *cred, int priv)
  818 {
  819 
  820         return (0);
  821 }
  822 
  823 static int
  824 stub_priv_grant(struct ucred *cred, int priv)
  825 {
  826 
  827         return (EPERM);
  828 }
  829 
  830 static int
  831 stub_proc_check_debug(struct ucred *cred, struct proc *p)
  832 {
  833 
  834         return (0);
  835 }
  836 
  837 static int
  838 stub_proc_check_sched(struct ucred *cred, struct proc *p)
  839 {
  840 
  841         return (0);
  842 }
  843 
  844 static int
  845 stub_proc_check_signal(struct ucred *cred, struct proc *p, int signum)
  846 {
  847 
  848         return (0);
  849 }
  850 
  851 static int
  852 stub_proc_check_wait(struct ucred *cred, struct proc *p)
  853 {
  854 
  855         return (0);
  856 }
  857 
  858 static int
  859 stub_socket_check_accept(struct ucred *cred, struct socket *so,
  860     struct label *solabel)
  861 {
  862 
  863 #if 0
  864         SOCK_LOCK(so);
  865         SOCK_UNLOCK(so);
  866 #endif
  867 
  868         return (0);
  869 }
  870 
  871 static int
  872 stub_socket_check_bind(struct ucred *cred, struct socket *so,
  873     struct label *solabel, struct sockaddr *sa)
  874 {
  875 
  876 #if 0
  877         SOCK_LOCK(so);
  878         SOCK_UNLOCK(so);
  879 #endif
  880 
  881         return (0);
  882 }
  883 
  884 static int
  885 stub_socket_check_connect(struct ucred *cred, struct socket *so,
  886     struct label *solabel, struct sockaddr *sa)
  887 {
  888 
  889 #if 0
  890         SOCK_LOCK(so);
  891         SOCK_UNLOCK(so);
  892 #endif
  893 
  894         return (0);
  895 }
  896 
  897 static int
  898 stub_socket_check_create(struct ucred *cred, int domain, int type, int proto)
  899 {
  900 
  901         return (0);
  902 }
  903 
  904 static int
  905 stub_socket_check_deliver(struct socket *so, struct label *solabel,
  906     struct mbuf *m, struct label *mlabel)
  907 {
  908 
  909 #if 0
  910         SOCK_LOCK(so);
  911         SOCK_UNLOCK(so);
  912 #endif
  913 
  914         return (0);
  915 }
  916 
  917 static int
  918 stub_socket_check_listen(struct ucred *cred, struct socket *so,
  919     struct label *solabel)
  920 {
  921 
  922 #if 0
  923         SOCK_LOCK(so);
  924         SOCK_UNLOCK(so);
  925 #endif
  926 
  927         return (0);
  928 }
  929 
  930 static int
  931 stub_socket_check_poll(struct ucred *cred, struct socket *so,
  932     struct label *solabel)
  933 {
  934 
  935 #if 0
  936         SOCK_LOCK(so);
  937         SOCK_UNLOCK(so);
  938 #endif
  939 
  940         return (0);
  941 }
  942 
  943 static int
  944 stub_socket_check_receive(struct ucred *cred, struct socket *so,
  945     struct label *solabel)
  946 {
  947 
  948 #if 0
  949         SOCK_LOCK(so);
  950         SOCK_UNLOCK(so);
  951 #endif
  952 
  953         return (0);
  954 }
  955 
  956 static int
  957 stub_socket_check_relabel(struct ucred *cred, struct socket *so,
  958     struct label *solabel, struct label *newlabel)
  959 {
  960 
  961         SOCK_LOCK_ASSERT(so);
  962 
  963         return (0);
  964 }
  965 static int
  966 stub_socket_check_send(struct ucred *cred, struct socket *so,
  967     struct label *solabel)
  968 {
  969 
  970 #if 0
  971         SOCK_LOCK(so);
  972         SOCK_UNLOCK(so);
  973 #endif
  974 
  975         return (0);
  976 }
  977 
  978 static int
  979 stub_socket_check_stat(struct ucred *cred, struct socket *so,
  980     struct label *solabel)
  981 {
  982 
  983 #if 0
  984         SOCK_LOCK(so);
  985         SOCK_UNLOCK(so);
  986 #endif
  987 
  988         return (0);
  989 }
  990 
  991 static int
  992 stub_inpcb_check_visible(struct ucred *cred, struct inpcb *inp,
  993    struct label *inplabel)
  994 {
  995 
  996         return (0);
  997 }
  998 
  999 static int
 1000 stub_socket_check_visible(struct ucred *cred, struct socket *so,
 1001    struct label *solabel)
 1002 {
 1003 
 1004 #if 0
 1005         SOCK_LOCK(so);
 1006         SOCK_UNLOCK(so);
 1007 #endif
 1008 
 1009         return (0);
 1010 }
 1011 
 1012 static void
 1013 stub_socket_create(struct ucred *cred, struct socket *so,
 1014     struct label *solabel)
 1015 {
 1016 
 1017 }
 1018 
 1019 static void
 1020 stub_socket_create_mbuf(struct socket *so, struct label *solabel,
 1021     struct mbuf *m, struct label *mlabel)
 1022 {
 1023 
 1024 #if 0
 1025         SOCK_LOCK(so);
 1026         SOCK_UNLOCK(so);
 1027 #endif
 1028 }
 1029 
 1030 static void
 1031 stub_socket_newconn(struct socket *oldso, struct label *oldsolabel,
 1032     struct socket *newso, struct label *newsolabel)
 1033 {
 1034 
 1035 #if 0
 1036         SOCK_LOCK(oldso);
 1037         SOCK_UNLOCK(oldso);
 1038 #endif
 1039 #if 0
 1040         SOCK_LOCK(newso);
 1041         SOCK_UNLOCK(newso);
 1042 #endif
 1043 }
 1044 
 1045 static void
 1046 stub_socket_relabel(struct ucred *cred, struct socket *so,
 1047     struct label *solabel, struct label *newlabel)
 1048 {
 1049 
 1050         SOCK_LOCK_ASSERT(so);
 1051 }
 1052 
 1053 static void
 1054 stub_socketpeer_set_from_mbuf(struct mbuf *m, struct label *mlabel,
 1055     struct socket *so, struct label *sopeerlabel)
 1056 {
 1057 
 1058 #if 0
 1059         SOCK_LOCK(so);
 1060         SOCK_UNLOCK(so);
 1061 #endif
 1062 }
 1063 
 1064 static void
 1065 stub_socketpeer_set_from_socket(struct socket *oldso,
 1066     struct label *oldsolabel, struct socket *newso,
 1067     struct label *newsopeerlabel)
 1068 {
 1069 
 1070 #if 0
 1071         SOCK_LOCK(oldso);
 1072         SOCK_UNLOCK(oldso);
 1073 #endif
 1074 #if 0
 1075         SOCK_LOCK(newso);
 1076         SOCK_UNLOCK(newso);
 1077 #endif
 1078 }
 1079 
 1080 static void
 1081 stub_syncache_create(struct label *label, struct inpcb *inp)
 1082 {
 1083 
 1084 }
 1085 
 1086 static void
 1087 stub_syncache_create_mbuf(struct label *sc_label, struct mbuf *m,
 1088     struct label *mlabel)
 1089 {
 1090 
 1091 }
 1092 
 1093 static int
 1094 stub_system_check_acct(struct ucred *cred, struct vnode *vp,
 1095     struct label *vplabel)
 1096 {
 1097 
 1098         return (0);
 1099 }
 1100 
 1101 static int
 1102 stub_system_check_audit(struct ucred *cred, void *record, int length)
 1103 {
 1104 
 1105         return (0);
 1106 }
 1107 
 1108 static int
 1109 stub_system_check_auditctl(struct ucred *cred, struct vnode *vp,
 1110     struct label *vplabel)
 1111 {
 1112 
 1113         return (0);
 1114 }
 1115 
 1116 static int
 1117 stub_system_check_auditon(struct ucred *cred, int cmd)
 1118 {
 1119 
 1120         return (0);
 1121 }
 1122 
 1123 static int
 1124 stub_system_check_reboot(struct ucred *cred, int how)
 1125 {
 1126 
 1127         return (0);
 1128 }
 1129 
 1130 static int
 1131 stub_system_check_swapoff(struct ucred *cred, struct vnode *vp,
 1132     struct label *vplabel)
 1133 {
 1134 
 1135         return (0);
 1136 }
 1137 
 1138 static int
 1139 stub_system_check_swapon(struct ucred *cred, struct vnode *vp,
 1140     struct label *vplabel)
 1141 {
 1142 
 1143         return (0);
 1144 }
 1145 
 1146 static int
 1147 stub_system_check_sysctl(struct ucred *cred, struct sysctl_oid *oidp,
 1148     void *arg1, int arg2, struct sysctl_req *req)
 1149 {
 1150 
 1151         return (0);
 1152 }
 1153 
 1154 static void
 1155 stub_sysvmsg_cleanup(struct label *msglabel)
 1156 {
 1157 
 1158 }
 1159 
 1160 static void
 1161 stub_sysvmsg_create(struct ucred *cred, struct msqid_kernel *msqkptr,
 1162     struct label *msqlabel, struct msg *msgptr, struct label *msglabel)
 1163 {
 1164 
 1165 }
 1166 
 1167 static int
 1168 stub_sysvmsq_check_msgmsq(struct ucred *cred, struct msg *msgptr,
 1169     struct label *msglabel, struct msqid_kernel *msqkptr,
 1170     struct label *msqklabel)
 1171 {
 1172 
 1173         return (0);
 1174 }
 1175 
 1176 static int
 1177 stub_sysvmsq_check_msgrcv(struct ucred *cred, struct msg *msgptr,
 1178     struct label *msglabel)
 1179 {
 1180 
 1181         return (0);
 1182 }
 1183 
 1184 static int
 1185 stub_sysvmsq_check_msgrmid(struct ucred *cred, struct msg *msgptr,
 1186     struct label *msglabel)
 1187 {
 1188 
 1189         return (0);
 1190 }
 1191 
 1192 static int
 1193 stub_sysvmsq_check_msqget(struct ucred *cred, struct msqid_kernel *msqkptr,
 1194     struct label *msqklabel)
 1195 {
 1196 
 1197         return (0);
 1198 }
 1199 
 1200 static int
 1201 stub_sysvmsq_check_msqsnd(struct ucred *cred, struct msqid_kernel *msqkptr,
 1202     struct label *msqklabel)
 1203 {
 1204 
 1205         return (0);
 1206 }
 1207 
 1208 static int
 1209 stub_sysvmsq_check_msqrcv(struct ucred *cred, struct msqid_kernel *msqkptr,
 1210     struct label *msqklabel)
 1211 {
 1212 
 1213         return (0);
 1214 }
 1215 
 1216 static int
 1217 stub_sysvmsq_check_msqctl(struct ucred *cred, struct msqid_kernel *msqkptr,
 1218     struct label *msqklabel, int cmd)
 1219 {
 1220 
 1221         return (0);
 1222 }
 1223 
 1224 static void
 1225 stub_sysvmsq_cleanup(struct label *msqlabel)
 1226 {
 1227 
 1228 }
 1229 
 1230 static void
 1231 stub_sysvmsq_create(struct ucred *cred, struct msqid_kernel *msqkptr,
 1232     struct label *msqlabel)
 1233 {
 1234 
 1235 }
 1236 
 1237 static int
 1238 stub_sysvsem_check_semctl(struct ucred *cred, struct semid_kernel *semakptr,
 1239     struct label *semaklabel, int cmd)
 1240 {
 1241 
 1242         return (0);
 1243 }
 1244 
 1245 static int
 1246 stub_sysvsem_check_semget(struct ucred *cred, struct semid_kernel *semakptr,
 1247     struct label *semaklabel)
 1248 {
 1249 
 1250         return (0);
 1251 }
 1252 
 1253 static int
 1254 stub_sysvsem_check_semop(struct ucred *cred, struct semid_kernel *semakptr,
 1255     struct label *semaklabel, size_t accesstype)
 1256 {
 1257 
 1258         return (0);
 1259 }
 1260 
 1261 static void
 1262 stub_sysvsem_cleanup(struct label *semalabel)
 1263 {
 1264 
 1265 }
 1266 
 1267 static void
 1268 stub_sysvsem_create(struct ucred *cred, struct semid_kernel *semakptr,
 1269     struct label *semalabel)
 1270 {
 1271 
 1272 }
 1273 
 1274 static int
 1275 stub_sysvshm_check_shmat(struct ucred *cred, struct shmid_kernel *shmsegptr,
 1276     struct label *shmseglabel, int shmflg)
 1277 {
 1278 
 1279         return (0);
 1280 }
 1281 
 1282 static int
 1283 stub_sysvshm_check_shmctl(struct ucred *cred, struct shmid_kernel *shmsegptr,
 1284     struct label *shmseglabel, int cmd)
 1285 {
 1286 
 1287         return (0);
 1288 }
 1289 
 1290 static int
 1291 stub_sysvshm_check_shmdt(struct ucred *cred, struct shmid_kernel *shmsegptr,
 1292     struct label *shmseglabel)
 1293 {
 1294 
 1295         return (0);
 1296 }
 1297 
 1298 static int
 1299 stub_sysvshm_check_shmget(struct ucred *cred, struct shmid_kernel *shmsegptr,
 1300     struct label *shmseglabel, int shmflg)
 1301 {
 1302 
 1303         return (0);
 1304 }
 1305 
 1306 static void
 1307 stub_sysvshm_cleanup(struct label *shmlabel)
 1308 {
 1309 
 1310 }
 1311 
 1312 static void
 1313 stub_sysvshm_create(struct ucred *cred, struct shmid_kernel *shmsegptr,
 1314     struct label *shmalabel)
 1315 {
 1316 
 1317 }
 1318 
 1319 static void
 1320 stub_thread_userret(struct thread *td)
 1321 {
 1322 
 1323 }
 1324 
 1325 static int
 1326 stub_vnode_associate_extattr(struct mount *mp, struct label *mplabel,
 1327     struct vnode *vp, struct label *vplabel)
 1328 {
 1329 
 1330         return (0);
 1331 }
 1332 
 1333 static void
 1334 stub_vnode_associate_singlelabel(struct mount *mp, struct label *mplabel,
 1335     struct vnode *vp, struct label *vplabel)
 1336 {
 1337 
 1338 }
 1339 
 1340 static int
 1341 stub_vnode_check_access(struct ucred *cred, struct vnode *vp,
 1342     struct label *vplabel, accmode_t accmode)
 1343 {
 1344 
 1345         return (0);
 1346 }
 1347 
 1348 static int
 1349 stub_vnode_check_chdir(struct ucred *cred, struct vnode *dvp,
 1350     struct label *dvplabel)
 1351 {
 1352 
 1353         return (0);
 1354 }
 1355 
 1356 static int
 1357 stub_vnode_check_chroot(struct ucred *cred, struct vnode *dvp,
 1358     struct label *dvplabel)
 1359 {
 1360 
 1361         return (0);
 1362 }
 1363 
 1364 static int
 1365 stub_vnode_check_create(struct ucred *cred, struct vnode *dvp,
 1366     struct label *dvplabel, struct componentname *cnp, struct vattr *vap)
 1367 {
 1368 
 1369         return (0);
 1370 }
 1371 
 1372 static int
 1373 stub_vnode_check_deleteacl(struct ucred *cred, struct vnode *vp,
 1374     struct label *vplabel, acl_type_t type)
 1375 {
 1376 
 1377         return (0);
 1378 }
 1379 
 1380 static int
 1381 stub_vnode_check_deleteextattr(struct ucred *cred, struct vnode *vp,
 1382     struct label *vplabel, int attrnamespace, const char *name)
 1383 {
 1384 
 1385         return (0);
 1386 }
 1387 
 1388 static int
 1389 stub_vnode_check_exec(struct ucred *cred, struct vnode *vp,
 1390     struct label *vplabel, struct image_params *imgp,
 1391     struct label *execlabel)
 1392 {
 1393 
 1394         return (0);
 1395 }
 1396 
 1397 static int
 1398 stub_vnode_check_getacl(struct ucred *cred, struct vnode *vp,
 1399     struct label *vplabel, acl_type_t type)
 1400 {
 1401 
 1402         return (0);
 1403 }
 1404 
 1405 static int
 1406 stub_vnode_check_getextattr(struct ucred *cred, struct vnode *vp,
 1407     struct label *vplabel, int attrnamespace, const char *name)
 1408 {
 1409 
 1410         return (0);
 1411 }
 1412 
 1413 static int
 1414 stub_vnode_check_link(struct ucred *cred, struct vnode *dvp,
 1415     struct label *dvplabel, struct vnode *vp, struct label *vplabel,
 1416     struct componentname *cnp)
 1417 {
 1418 
 1419         return (0);
 1420 }
 1421 
 1422 static int
 1423 stub_vnode_check_listextattr(struct ucred *cred, struct vnode *vp,
 1424     struct label *vplabel, int attrnamespace)
 1425 {
 1426 
 1427         return (0);
 1428 }
 1429 
 1430 static int
 1431 stub_vnode_check_lookup(struct ucred *cred, struct vnode *dvp,
 1432     struct label *dvplabel, struct componentname *cnp)
 1433 {
 1434 
 1435         return (0);
 1436 }
 1437 
 1438 static int
 1439 stub_vnode_check_mmap(struct ucred *cred, struct vnode *vp,
 1440     struct label *vplabel, int prot, int flags)
 1441 {
 1442 
 1443         return (0);
 1444 }
 1445 
 1446 static void
 1447 stub_vnode_check_mmap_downgrade(struct ucred *cred, struct vnode *vp,
 1448     struct label *vplabel, int *prot)
 1449 {
 1450 
 1451 }
 1452 
 1453 static int
 1454 stub_vnode_check_mprotect(struct ucred *cred, struct vnode *vp,
 1455     struct label *vplabel, int prot)
 1456 {
 1457 
 1458         return (0);
 1459 }
 1460 
 1461 static int
 1462 stub_vnode_check_open(struct ucred *cred, struct vnode *vp,
 1463     struct label *vplabel, accmode_t accmode)
 1464 {
 1465 
 1466         return (0);
 1467 }
 1468 
 1469 static int
 1470 stub_vnode_check_poll(struct ucred *active_cred, struct ucred *file_cred,
 1471     struct vnode *vp, struct label *vplabel)
 1472 {
 1473 
 1474         return (0);
 1475 }
 1476 
 1477 static int
 1478 stub_vnode_check_read(struct ucred *active_cred, struct ucred *file_cred,
 1479     struct vnode *vp, struct label *vplabel)
 1480 {
 1481 
 1482         return (0);
 1483 }
 1484 
 1485 static int
 1486 stub_vnode_check_readdir(struct ucred *cred, struct vnode *vp,
 1487     struct label *dvplabel)
 1488 {
 1489 
 1490         return (0);
 1491 }
 1492 
 1493 static int
 1494 stub_vnode_check_readlink(struct ucred *cred, struct vnode *vp,
 1495     struct label *vplabel)
 1496 {
 1497 
 1498         return (0);
 1499 }
 1500 
 1501 static int
 1502 stub_vnode_check_relabel(struct ucred *cred, struct vnode *vp,
 1503     struct label *vplabel, struct label *newlabel)
 1504 {
 1505 
 1506         return (0);
 1507 }
 1508 
 1509 static int
 1510 stub_vnode_check_rename_from(struct ucred *cred, struct vnode *dvp,
 1511     struct label *dvplabel, struct vnode *vp, struct label *vplabel,
 1512     struct componentname *cnp)
 1513 {
 1514 
 1515         return (0);
 1516 }
 1517 
 1518 static int
 1519 stub_vnode_check_rename_to(struct ucred *cred, struct vnode *dvp,
 1520     struct label *dvplabel, struct vnode *vp, struct label *vplabel,
 1521     int samedir, struct componentname *cnp)
 1522 {
 1523 
 1524         return (0);
 1525 }
 1526 
 1527 static int
 1528 stub_vnode_check_revoke(struct ucred *cred, struct vnode *vp,
 1529     struct label *vplabel)
 1530 {
 1531 
 1532         return (0);
 1533 }
 1534 
 1535 static int
 1536 stub_vnode_check_setacl(struct ucred *cred, struct vnode *vp,
 1537     struct label *vplabel, acl_type_t type, struct acl *acl)
 1538 {
 1539 
 1540         return (0);
 1541 }
 1542 
 1543 static int
 1544 stub_vnode_check_setextattr(struct ucred *cred, struct vnode *vp,
 1545     struct label *vplabel, int attrnamespace, const char *name)
 1546 {
 1547 
 1548         return (0);
 1549 }
 1550 
 1551 static int
 1552 stub_vnode_check_setflags(struct ucred *cred, struct vnode *vp,
 1553     struct label *vplabel, u_long flags)
 1554 {
 1555 
 1556         return (0);
 1557 }
 1558 
 1559 static int
 1560 stub_vnode_check_setmode(struct ucred *cred, struct vnode *vp,
 1561     struct label *vplabel, mode_t mode)
 1562 {
 1563 
 1564         return (0);
 1565 }
 1566 
 1567 static int
 1568 stub_vnode_check_setowner(struct ucred *cred, struct vnode *vp,
 1569     struct label *vplabel, uid_t uid, gid_t gid)
 1570 {
 1571 
 1572         return (0);
 1573 }
 1574 
 1575 static int
 1576 stub_vnode_check_setutimes(struct ucred *cred, struct vnode *vp,
 1577     struct label *vplabel, struct timespec atime, struct timespec mtime)
 1578 {
 1579 
 1580         return (0);
 1581 }
 1582 
 1583 static int
 1584 stub_vnode_check_stat(struct ucred *active_cred, struct ucred *file_cred,
 1585     struct vnode *vp, struct label *vplabel)
 1586 {
 1587 
 1588         return (0);
 1589 }
 1590 
 1591 static int
 1592 stub_vnode_check_unlink(struct ucred *cred, struct vnode *dvp,
 1593     struct label *dvplabel, struct vnode *vp, struct label *vplabel,
 1594     struct componentname *cnp)
 1595 {
 1596 
 1597         return (0);
 1598 }
 1599 
 1600 static int
 1601 stub_vnode_check_write(struct ucred *active_cred, struct ucred *file_cred,
 1602     struct vnode *vp, struct label *vplabel)
 1603 {
 1604 
 1605         return (0);
 1606 }
 1607 
 1608 static int
 1609 stub_vnode_create_extattr(struct ucred *cred, struct mount *mp,
 1610     struct label *mntlabel, struct vnode *dvp, struct label *dvplabel,
 1611     struct vnode *vp, struct label *vplabel, struct componentname *cnp)
 1612 {
 1613 
 1614         return (0);
 1615 }
 1616 
 1617 static void
 1618 stub_vnode_execve_transition(struct ucred *old, struct ucred *new,
 1619     struct vnode *vp, struct label *vplabel, struct label *interpvplabel,
 1620     struct image_params *imgp, struct label *execlabel)
 1621 {
 1622 
 1623 }
 1624 
 1625 static int
 1626 stub_vnode_execve_will_transition(struct ucred *old, struct vnode *vp,
 1627     struct label *vplabel, struct label *interpvplabel,
 1628     struct image_params *imgp, struct label *execlabel)
 1629 {
 1630 
 1631         return (0);
 1632 }
 1633 
 1634 static void
 1635 stub_vnode_relabel(struct ucred *cred, struct vnode *vp,
 1636     struct label *vplabel, struct label *label)
 1637 {
 1638 
 1639 }
 1640 
 1641 static int
 1642 stub_vnode_setlabel_extattr(struct ucred *cred, struct vnode *vp,
 1643     struct label *vplabel, struct label *intlabel)
 1644 {
 1645 
 1646         return (0);
 1647 }
 1648 
 1649 /*
 1650  * Register functions with MAC Framework policy entry points.
 1651  */
 1652 static struct mac_policy_ops stub_ops =
 1653 {
 1654         .mpo_destroy = stub_destroy,
 1655         .mpo_init = stub_init,
 1656         .mpo_syscall = stub_syscall,
 1657 
 1658         .mpo_bpfdesc_check_receive = stub_bpfdesc_check_receive,
 1659         .mpo_bpfdesc_create = stub_bpfdesc_create,
 1660         .mpo_bpfdesc_create_mbuf = stub_bpfdesc_create_mbuf,
 1661         .mpo_bpfdesc_destroy_label = stub_destroy_label,
 1662         .mpo_bpfdesc_init_label = stub_init_label,
 1663 
 1664         .mpo_cred_associate_nfsd = stub_cred_associate_nfsd,
 1665         .mpo_cred_check_relabel = stub_cred_check_relabel,
 1666         .mpo_cred_check_setaudit = stub_cred_check_setaudit,
 1667         .mpo_cred_check_setaudit_addr = stub_cred_check_setaudit_addr,
 1668         .mpo_cred_check_setauid = stub_cred_check_setauid,
 1669         .mpo_cred_check_setegid = stub_cred_check_setegid,
 1670         .mpo_cred_check_seteuid = stub_cred_check_seteuid,
 1671         .mpo_cred_check_setgid = stub_cred_check_setgid,
 1672         .mpo_cred_check_setgroups = stub_cred_check_setgroups,
 1673         .mpo_cred_check_setregid = stub_cred_check_setregid,
 1674         .mpo_cred_check_setresgid = stub_cred_check_setresgid,
 1675         .mpo_cred_check_setresuid = stub_cred_check_setresuid,
 1676         .mpo_cred_check_setreuid = stub_cred_check_setreuid,
 1677         .mpo_cred_check_setuid = stub_cred_check_setuid,
 1678         .mpo_cred_check_visible = stub_cred_check_visible,
 1679         .mpo_cred_copy_label = stub_copy_label,
 1680         .mpo_cred_create_init = stub_cred_create_init,
 1681         .mpo_cred_create_swapper = stub_cred_create_swapper,
 1682         .mpo_cred_destroy_label = stub_destroy_label,
 1683         .mpo_cred_externalize_label = stub_externalize_label,
 1684         .mpo_cred_init_label = stub_init_label,
 1685         .mpo_cred_internalize_label = stub_internalize_label,
 1686         .mpo_cred_relabel= stub_cred_relabel,
 1687 
 1688         .mpo_devfs_create_device = stub_devfs_create_device,
 1689         .mpo_devfs_create_directory = stub_devfs_create_directory,
 1690         .mpo_devfs_create_symlink = stub_devfs_create_symlink,
 1691         .mpo_devfs_destroy_label = stub_destroy_label,
 1692         .mpo_devfs_init_label = stub_init_label,
 1693         .mpo_devfs_update = stub_devfs_update,
 1694         .mpo_devfs_vnode_associate = stub_devfs_vnode_associate,
 1695 
 1696         .mpo_ifnet_check_relabel = stub_ifnet_check_relabel,
 1697         .mpo_ifnet_check_transmit = stub_ifnet_check_transmit,
 1698         .mpo_ifnet_copy_label = stub_copy_label,
 1699         .mpo_ifnet_create = stub_ifnet_create,
 1700         .mpo_ifnet_create_mbuf = stub_ifnet_create_mbuf,
 1701         .mpo_ifnet_destroy_label = stub_destroy_label,
 1702         .mpo_ifnet_externalize_label = stub_externalize_label,
 1703         .mpo_ifnet_init_label = stub_init_label,
 1704         .mpo_ifnet_internalize_label = stub_internalize_label,
 1705         .mpo_ifnet_relabel = stub_ifnet_relabel,
 1706 
 1707         .mpo_inpcb_check_deliver = stub_inpcb_check_deliver,
 1708         .mpo_inpcb_check_visible = stub_inpcb_check_visible,
 1709         .mpo_inpcb_create = stub_inpcb_create,
 1710         .mpo_inpcb_create_mbuf = stub_inpcb_create_mbuf,
 1711         .mpo_inpcb_destroy_label = stub_destroy_label,
 1712         .mpo_inpcb_init_label = stub_init_label_waitcheck,
 1713         .mpo_inpcb_sosetlabel = stub_inpcb_sosetlabel,
 1714 
 1715         .mpo_ip6q_create = stub_ip6q_create,
 1716         .mpo_ip6q_destroy_label = stub_destroy_label,
 1717         .mpo_ip6q_init_label = stub_init_label_waitcheck,
 1718         .mpo_ip6q_match = stub_ip6q_match,
 1719         .mpo_ip6q_update = stub_ip6q_update,
 1720         .mpo_ip6q_reassemble = stub_ip6q_reassemble,
 1721 
 1722         .mpo_ipq_create = stub_ipq_create,
 1723         .mpo_ipq_destroy_label = stub_destroy_label,
 1724         .mpo_ipq_init_label = stub_init_label_waitcheck,
 1725         .mpo_ipq_match = stub_ipq_match,
 1726         .mpo_ipq_update = stub_ipq_update,
 1727         .mpo_ipq_reassemble = stub_ipq_reassemble,
 1728 
 1729         .mpo_kenv_check_dump = stub_kenv_check_dump,
 1730         .mpo_kenv_check_get = stub_kenv_check_get,
 1731         .mpo_kenv_check_set = stub_kenv_check_set,
 1732         .mpo_kenv_check_unset = stub_kenv_check_unset,
 1733 
 1734         .mpo_kld_check_load = stub_kld_check_load,
 1735         .mpo_kld_check_stat = stub_kld_check_stat,
 1736 
 1737         .mpo_mbuf_copy_label = stub_copy_label,
 1738         .mpo_mbuf_destroy_label = stub_destroy_label,
 1739         .mpo_mbuf_init_label = stub_init_label_waitcheck,
 1740 
 1741         .mpo_mount_check_stat = stub_mount_check_stat,
 1742         .mpo_mount_create = stub_mount_create,
 1743         .mpo_mount_destroy_label = stub_destroy_label,
 1744         .mpo_mount_init_label = stub_init_label,
 1745 
 1746         .mpo_netinet_arp_send = stub_netinet_arp_send,
 1747         .mpo_netinet_firewall_reply = stub_netinet_firewall_reply,
 1748         .mpo_netinet_firewall_send = stub_netinet_firewall_send,
 1749         .mpo_netinet_fragment = stub_netinet_fragment,
 1750         .mpo_netinet_icmp_reply = stub_netinet_icmp_reply,
 1751         .mpo_netinet_icmp_replyinplace = stub_netinet_icmp_replyinplace,
 1752         .mpo_netinet_tcp_reply = stub_netinet_tcp_reply,
 1753         .mpo_netinet_igmp_send = stub_netinet_igmp_send,
 1754 
 1755         .mpo_netinet6_nd6_send = stub_netinet6_nd6_send,
 1756 
 1757         .mpo_pipe_check_ioctl = stub_pipe_check_ioctl,
 1758         .mpo_pipe_check_poll = stub_pipe_check_poll,
 1759         .mpo_pipe_check_read = stub_pipe_check_read,
 1760         .mpo_pipe_check_relabel = stub_pipe_check_relabel,
 1761         .mpo_pipe_check_stat = stub_pipe_check_stat,
 1762         .mpo_pipe_check_write = stub_pipe_check_write,
 1763         .mpo_pipe_copy_label = stub_copy_label,
 1764         .mpo_pipe_create = stub_pipe_create,
 1765         .mpo_pipe_destroy_label = stub_destroy_label,
 1766         .mpo_pipe_externalize_label = stub_externalize_label,
 1767         .mpo_pipe_init_label = stub_init_label,
 1768         .mpo_pipe_internalize_label = stub_internalize_label,
 1769         .mpo_pipe_relabel = stub_pipe_relabel,
 1770 
 1771         .mpo_posixsem_check_getvalue = stub_posixsem_check_getvalue,
 1772         .mpo_posixsem_check_open = stub_posixsem_check_open,
 1773         .mpo_posixsem_check_post = stub_posixsem_check_post,
 1774         .mpo_posixsem_check_setmode = stub_posixsem_check_setmode,
 1775         .mpo_posixsem_check_setowner = stub_posixsem_check_setowner,
 1776         .mpo_posixsem_check_stat = stub_posixsem_check_stat,
 1777         .mpo_posixsem_check_unlink = stub_posixsem_check_unlink,
 1778         .mpo_posixsem_check_wait = stub_posixsem_check_wait,
 1779         .mpo_posixsem_create = stub_posixsem_create,
 1780         .mpo_posixsem_destroy_label = stub_destroy_label,
 1781         .mpo_posixsem_init_label = stub_init_label,
 1782 
 1783         .mpo_posixshm_check_create = stub_posixshm_check_create,
 1784         .mpo_posixshm_check_mmap = stub_posixshm_check_mmap,
 1785         .mpo_posixshm_check_open = stub_posixshm_check_open,
 1786         .mpo_posixshm_check_read = stub_posixshm_check_read,
 1787         .mpo_posixshm_check_setmode = stub_posixshm_check_setmode,
 1788         .mpo_posixshm_check_setowner = stub_posixshm_check_setowner,
 1789         .mpo_posixshm_check_stat = stub_posixshm_check_stat,
 1790         .mpo_posixshm_check_truncate = stub_posixshm_check_truncate,
 1791         .mpo_posixshm_check_unlink = stub_posixshm_check_unlink,
 1792         .mpo_posixshm_check_write = stub_posixshm_check_write,
 1793         .mpo_posixshm_create = stub_posixshm_create,
 1794         .mpo_posixshm_destroy_label = stub_destroy_label,
 1795         .mpo_posixshm_init_label = stub_init_label,
 1796 
 1797         .mpo_priv_check = stub_priv_check,
 1798         .mpo_priv_grant = stub_priv_grant,
 1799 
 1800         .mpo_proc_check_debug = stub_proc_check_debug,
 1801         .mpo_proc_check_sched = stub_proc_check_sched,
 1802         .mpo_proc_check_signal = stub_proc_check_signal,
 1803         .mpo_proc_check_wait = stub_proc_check_wait,
 1804 
 1805         .mpo_socket_check_accept = stub_socket_check_accept,
 1806         .mpo_socket_check_bind = stub_socket_check_bind,
 1807         .mpo_socket_check_connect = stub_socket_check_connect,
 1808         .mpo_socket_check_create = stub_socket_check_create,
 1809         .mpo_socket_check_deliver = stub_socket_check_deliver,
 1810         .mpo_socket_check_listen = stub_socket_check_listen,
 1811         .mpo_socket_check_poll = stub_socket_check_poll,
 1812         .mpo_socket_check_receive = stub_socket_check_receive,
 1813         .mpo_socket_check_relabel = stub_socket_check_relabel,
 1814         .mpo_socket_check_send = stub_socket_check_send,
 1815         .mpo_socket_check_stat = stub_socket_check_stat,
 1816         .mpo_socket_check_visible = stub_socket_check_visible,
 1817         .mpo_socket_copy_label = stub_copy_label,
 1818         .mpo_socket_create = stub_socket_create,
 1819         .mpo_socket_create_mbuf = stub_socket_create_mbuf,
 1820         .mpo_socket_destroy_label = stub_destroy_label,
 1821         .mpo_socket_externalize_label = stub_externalize_label,
 1822         .mpo_socket_init_label = stub_init_label_waitcheck,
 1823         .mpo_socket_internalize_label = stub_internalize_label,
 1824         .mpo_socket_newconn = stub_socket_newconn,
 1825         .mpo_socket_relabel = stub_socket_relabel,
 1826 
 1827         .mpo_socketpeer_destroy_label = stub_destroy_label,
 1828         .mpo_socketpeer_externalize_label = stub_externalize_label,
 1829         .mpo_socketpeer_init_label = stub_init_label_waitcheck,
 1830         .mpo_socketpeer_set_from_mbuf = stub_socketpeer_set_from_mbuf,
 1831         .mpo_socketpeer_set_from_socket = stub_socketpeer_set_from_socket,
 1832 
 1833         .mpo_syncache_init_label = stub_init_label_waitcheck,
 1834         .mpo_syncache_destroy_label = stub_destroy_label,
 1835         .mpo_syncache_create = stub_syncache_create,
 1836         .mpo_syncache_create_mbuf= stub_syncache_create_mbuf,
 1837 
 1838         .mpo_sysvmsg_cleanup = stub_sysvmsg_cleanup,
 1839         .mpo_sysvmsg_create = stub_sysvmsg_create,
 1840         .mpo_sysvmsg_destroy_label = stub_destroy_label,
 1841         .mpo_sysvmsg_init_label = stub_init_label,
 1842 
 1843         .mpo_sysvmsq_check_msgmsq = stub_sysvmsq_check_msgmsq,
 1844         .mpo_sysvmsq_check_msgrcv = stub_sysvmsq_check_msgrcv,
 1845         .mpo_sysvmsq_check_msgrmid = stub_sysvmsq_check_msgrmid,
 1846         .mpo_sysvmsq_check_msqget = stub_sysvmsq_check_msqget,
 1847         .mpo_sysvmsq_check_msqsnd = stub_sysvmsq_check_msqsnd,
 1848         .mpo_sysvmsq_check_msqrcv = stub_sysvmsq_check_msqrcv,
 1849         .mpo_sysvmsq_check_msqctl = stub_sysvmsq_check_msqctl,
 1850         .mpo_sysvmsq_cleanup = stub_sysvmsq_cleanup,
 1851         .mpo_sysvmsq_create = stub_sysvmsq_create,
 1852         .mpo_sysvmsq_destroy_label = stub_destroy_label,
 1853         .mpo_sysvmsq_init_label = stub_init_label,
 1854 
 1855         .mpo_sysvsem_check_semctl = stub_sysvsem_check_semctl,
 1856         .mpo_sysvsem_check_semget = stub_sysvsem_check_semget,
 1857         .mpo_sysvsem_check_semop = stub_sysvsem_check_semop,
 1858         .mpo_sysvsem_cleanup = stub_sysvsem_cleanup,
 1859         .mpo_sysvsem_create = stub_sysvsem_create,
 1860         .mpo_sysvsem_destroy_label = stub_destroy_label,
 1861         .mpo_sysvsem_init_label = stub_init_label,
 1862 
 1863         .mpo_sysvshm_check_shmat = stub_sysvshm_check_shmat,
 1864         .mpo_sysvshm_check_shmctl = stub_sysvshm_check_shmctl,
 1865         .mpo_sysvshm_check_shmdt = stub_sysvshm_check_shmdt,
 1866         .mpo_sysvshm_check_shmget = stub_sysvshm_check_shmget,
 1867         .mpo_sysvshm_cleanup = stub_sysvshm_cleanup,
 1868         .mpo_sysvshm_create = stub_sysvshm_create,
 1869         .mpo_sysvshm_destroy_label = stub_destroy_label,
 1870         .mpo_sysvshm_init_label = stub_init_label,
 1871 
 1872         .mpo_system_check_acct = stub_system_check_acct,
 1873         .mpo_system_check_audit = stub_system_check_audit,
 1874         .mpo_system_check_auditctl = stub_system_check_auditctl,
 1875         .mpo_system_check_auditon = stub_system_check_auditon,
 1876         .mpo_system_check_reboot = stub_system_check_reboot,
 1877         .mpo_system_check_swapoff = stub_system_check_swapoff,
 1878         .mpo_system_check_swapon = stub_system_check_swapon,
 1879         .mpo_system_check_sysctl = stub_system_check_sysctl,
 1880 
 1881         .mpo_thread_userret = stub_thread_userret,
 1882 
 1883         .mpo_vnode_associate_extattr = stub_vnode_associate_extattr,
 1884         .mpo_vnode_associate_singlelabel = stub_vnode_associate_singlelabel,
 1885         .mpo_vnode_check_access = stub_vnode_check_access,
 1886         .mpo_vnode_check_chdir = stub_vnode_check_chdir,
 1887         .mpo_vnode_check_chroot = stub_vnode_check_chroot,
 1888         .mpo_vnode_check_create = stub_vnode_check_create,
 1889         .mpo_vnode_check_deleteacl = stub_vnode_check_deleteacl,
 1890         .mpo_vnode_check_deleteextattr = stub_vnode_check_deleteextattr,
 1891         .mpo_vnode_check_exec = stub_vnode_check_exec,
 1892         .mpo_vnode_check_getacl = stub_vnode_check_getacl,
 1893         .mpo_vnode_check_getextattr = stub_vnode_check_getextattr,
 1894         .mpo_vnode_check_link = stub_vnode_check_link,
 1895         .mpo_vnode_check_listextattr = stub_vnode_check_listextattr,
 1896         .mpo_vnode_check_lookup = stub_vnode_check_lookup,
 1897         .mpo_vnode_check_mmap = stub_vnode_check_mmap,
 1898         .mpo_vnode_check_mmap_downgrade = stub_vnode_check_mmap_downgrade,
 1899         .mpo_vnode_check_mprotect = stub_vnode_check_mprotect,
 1900         .mpo_vnode_check_open = stub_vnode_check_open,
 1901         .mpo_vnode_check_poll = stub_vnode_check_poll,
 1902         .mpo_vnode_check_read = stub_vnode_check_read,
 1903         .mpo_vnode_check_readdir = stub_vnode_check_readdir,
 1904         .mpo_vnode_check_readlink = stub_vnode_check_readlink,
 1905         .mpo_vnode_check_relabel = stub_vnode_check_relabel,
 1906         .mpo_vnode_check_rename_from = stub_vnode_check_rename_from,
 1907         .mpo_vnode_check_rename_to = stub_vnode_check_rename_to,
 1908         .mpo_vnode_check_revoke = stub_vnode_check_revoke,
 1909         .mpo_vnode_check_setacl = stub_vnode_check_setacl,
 1910         .mpo_vnode_check_setextattr = stub_vnode_check_setextattr,
 1911         .mpo_vnode_check_setflags = stub_vnode_check_setflags,
 1912         .mpo_vnode_check_setmode = stub_vnode_check_setmode,
 1913         .mpo_vnode_check_setowner = stub_vnode_check_setowner,
 1914         .mpo_vnode_check_setutimes = stub_vnode_check_setutimes,
 1915         .mpo_vnode_check_stat = stub_vnode_check_stat,
 1916         .mpo_vnode_check_unlink = stub_vnode_check_unlink,
 1917         .mpo_vnode_check_write = stub_vnode_check_write,
 1918         .mpo_vnode_copy_label = stub_copy_label,
 1919         .mpo_vnode_create_extattr = stub_vnode_create_extattr,
 1920         .mpo_vnode_destroy_label = stub_destroy_label,
 1921         .mpo_vnode_execve_transition = stub_vnode_execve_transition,
 1922         .mpo_vnode_execve_will_transition = stub_vnode_execve_will_transition,
 1923         .mpo_vnode_externalize_label = stub_externalize_label,
 1924         .mpo_vnode_init_label = stub_init_label,
 1925         .mpo_vnode_internalize_label = stub_internalize_label,
 1926         .mpo_vnode_relabel = stub_vnode_relabel,
 1927         .mpo_vnode_setlabel_extattr = stub_vnode_setlabel_extattr,
 1928 };
 1929 
 1930 MAC_POLICY_SET(&stub_ops, mac_stub, "TrustedBSD MAC/Stub",
 1931     MPC_LOADTIME_FLAG_UNLOADOK, NULL);

Cache object: ced687f32835ddfe91d14202004aaadb


[ source navigation ] [ diff markup ] [ identifier search ] [ freetext search ] [ file search ] [ list types ] [ track identifier ]


This page is part of the FreeBSD/Linux Linux Kernel Cross-Reference, and was automatically generated using a modified version of the LXR engine.