86 struct ucred;
108 void	mac_bpfdesc_create(struct ucred *cred, struct bpf_d *d);
113 void	mac_cred_associate_nfsd(struct ucred *cred);
114 int	mac_cred_check_setaudit(struct ucred *cred, struct auditinfo *ai);
115 int	mac_cred_check_setaudit_addr(struct ucred *cred,
117 int	mac_cred_check_setauid(struct ucred *cred, uid_t auid);
118 int	mac_cred_check_setegid(struct ucred *cred, gid_t egid);
119 int	mac_cred_check_seteuid(struct ucred *cred, uid_t euid);
120 int	mac_cred_check_setgid(struct ucred *cred, gid_t gid);
121 int	mac_cred_check_setgroups(struct ucred *cred, int ngroups,
123 int	mac_cred_check_setregid(struct ucred *cred, gid_t rgid, gid_t egid);
124 int	mac_cred_check_setresgid(struct ucred *cred, gid_t rgid, gid_t egid,
126 int	mac_cred_check_setresuid(struct ucred *cred, uid_t ruid, uid_t euid,
128 int	mac_cred_check_setreuid(struct ucred *cred, uid_t ruid, uid_t euid);
129 int	mac_cred_check_setuid(struct ucred *cred, uid_t uid);
130 int	mac_cred_check_visible(struct ucred *cr1, struct ucred *cr2);
131 void	mac_cred_copy(struct ucred *cr1, struct ucred *cr2);
132 void	mac_cred_create_init(struct ucred *cred);
133 void	mac_cred_create_swapper(struct ucred *cred);
134 void	mac_cred_destroy(struct ucred *);
135 void	mac_cred_init(struct ucred *);
142 void	mac_devfs_create_device(struct ucred *cred, struct mount *mp,
146 void	mac_devfs_create_symlink(struct ucred *cred, struct mount *mp,
190 int	mac_ifnet_ioctl_get(struct ucred *cred, struct ifreq *ifr,
192 int	mac_ifnet_ioctl_set(struct ucred *cred, struct ifreq *ifr,
196 int	mac_inet_check_add_addr(struct ucred *cred,
198 int	mac_inet6_check_add_addr(struct ucred *cred,
202 int	mac_inpcb_check_visible(struct ucred *cred, struct inpcb *inp);
226 int	mac_kenv_check_dump(struct ucred *cred);
227 int	mac_kenv_check_get(struct ucred *cred, char *name);
228 int	mac_kenv_check_set(struct ucred *cred, char *name, char *value);
229 int	mac_kenv_check_unset(struct ucred *cred, char *name);
231 int	mac_kld_check_load(struct ucred *cred, struct vnode *vp);
232 int	mac_kld_check_stat(struct ucred *cred);
241 int	mac_mount_check_stat(struct ucred *cred, struct mount *mp);
242 void	mac_mount_create(struct ucred *cred, struct mount *mp);
257 int	mac_pipe_check_ioctl(struct ucred *cred, struct pipepair *pp,
259 int	mac_pipe_check_poll_impl(struct ucred *cred, struct pipepair *pp);
267 mac_pipe_check_poll(struct ucred *cred, struct pipepair *pp)  in mac_pipe_check_poll()
281 int	mac_pipe_check_stat(struct ucred *cred, struct pipepair *pp);
282 int	mac_pipe_check_read_impl(struct ucred *cred, struct pipepair *pp);
290 mac_pipe_check_read(struct ucred *cred, struct pipepair *pp)  in mac_pipe_check_read()
298 int	mac_pipe_check_write(struct ucred *cred, struct pipepair *pp);
299 void	mac_pipe_create(struct ucred *cred, struct pipepair *pp);
302 int	mac_pipe_label_set(struct ucred *cred, struct pipepair *pp,
305 int	mac_posixsem_check_getvalue(struct ucred *active_cred,
306 	    struct ucred *file_cred, struct ksem *ks);
307 int	mac_posixsem_check_open(struct ucred *cred, struct ksem *ks);
308 int	mac_posixsem_check_post(struct ucred *active_cred,
309 	    struct ucred *file_cred, struct ksem *ks);
310 int	mac_posixsem_check_setmode(struct ucred *cred, struct ksem *ks,
312 int	mac_posixsem_check_setowner(struct ucred *cred, struct ksem *ks,
314 int	mac_posixsem_check_stat(struct ucred *active_cred,
315 	    struct ucred *file_cred, struct ksem *ks);
316 int	mac_posixsem_check_unlink(struct ucred *cred, struct ksem *ks);
317 int	mac_posixsem_check_wait(struct ucred *active_cred,
318 	    struct ucred *file_cred, struct ksem *ks);
319 void 	mac_posixsem_create(struct ucred *cred, struct ksem *ks);
323 int	mac_posixshm_check_create(struct ucred *cred, const char *path);
324 int	mac_posixshm_check_mmap(struct ucred *cred, struct shmfd *shmfd,
326 int	mac_posixshm_check_open(struct ucred *cred, struct shmfd *shmfd,
328 int	mac_posixshm_check_read(struct ucred *active_cred,
329 	    struct ucred *file_cred, struct shmfd *shmfd);
330 int	mac_posixshm_check_setmode(struct ucred *cred, struct shmfd *shmfd,
332 int	mac_posixshm_check_setowner(struct ucred *cred, struct shmfd *shmfd,
334 int	mac_posixshm_check_stat(struct ucred *active_cred,
335 	    struct ucred *file_cred, struct shmfd *shmfd);
336 int	mac_posixshm_check_truncate(struct ucred *active_cred,
337 	    struct ucred *file_cred, struct shmfd *shmfd);
338 int	mac_posixshm_check_unlink(struct ucred *cred, struct shmfd *shmfd);
339 int	mac_posixshm_check_write(struct ucred *active_cred,
340 	    struct ucred *file_cred, struct shmfd *shmfd);
341 void 	mac_posixshm_create(struct ucred *cred, struct shmfd *shmfd);
345 int	mac_priv_check_impl(struct ucred *cred, int priv);
353 mac_priv_check(struct ucred *cred, int priv)  in mac_priv_check()
361 int	mac_priv_grant_impl(struct ucred *cred, int priv);
369 mac_priv_grant(struct ucred *cred, int priv)  in mac_priv_grant()
377 int	mac_proc_check_debug(struct ucred *cred, struct proc *p);
378 int	mac_proc_check_sched(struct ucred *cred, struct proc *p);
379 int	mac_proc_check_signal(struct ucred *cred, struct proc *p,
381 int	mac_proc_check_wait(struct ucred *cred, struct proc *p);
391 int	mac_socket_check_accept(struct ucred *cred, struct socket *so);
392 int	mac_socket_check_bind(struct ucred *cred, struct socket *so,
394 int	mac_socket_check_connect(struct ucred *cred, struct socket *so,
396 int	mac_socket_check_create(struct ucred *cred, int domain, int type,
399 int	mac_socket_check_listen(struct ucred *cred, struct socket *so);
400 int	mac_socket_check_poll(struct ucred *cred, struct socket *so);
401 int	mac_socket_check_receive(struct ucred *cred, struct socket *so);
402 int	mac_socket_check_send(struct ucred *cred, struct socket *so);
403 int	mac_socket_check_stat(struct ucred *cred, struct socket *so);
404 int	mac_socket_check_visible(struct ucred *cred, struct socket *so);
406 void	mac_socket_create(struct ucred *cred, struct socket *so);
410 int	mac_getsockopt_label(struct ucred *cred, struct socket *so,
412 int	mac_getsockopt_peerlabel(struct ucred *cred, struct socket *so,
414 int	mac_setsockopt_label(struct ucred *cred, struct socket *so,
426 int	mac_system_check_acct(struct ucred *cred, struct vnode *vp);
427 int	mac_system_check_audit(struct ucred *cred, void *record, int length);
428 int	mac_system_check_auditctl(struct ucred *cred, struct vnode *vp);
429 int	mac_system_check_auditon(struct ucred *cred, int cmd);
430 int	mac_system_check_reboot(struct ucred *cred, int howto);
431 int	mac_system_check_swapon(struct ucred *cred, struct vnode *vp);
432 int	mac_system_check_swapoff(struct ucred *cred, struct vnode *vp);
433 int	mac_system_check_sysctl(struct ucred *cred, struct sysctl_oid *oidp,
437 void	mac_sysvmsg_create(struct ucred *cred, struct msqid_kernel *msqkptr,
442 int	mac_sysvmsq_check_msgmsq(struct ucred *cred, struct msg *msgptr,
444 int	mac_sysvmsq_check_msgrcv(struct ucred *cred, struct msg *msgptr);
445 int	mac_sysvmsq_check_msgrmid(struct ucred *cred, struct msg *msgptr);
446 int	mac_sysvmsq_check_msqctl(struct ucred *cred,
448 int	mac_sysvmsq_check_msqget(struct ucred *cred,
450 int	mac_sysvmsq_check_msqrcv(struct ucred *cred,
452 int	mac_sysvmsq_check_msqsnd(struct ucred *cred,
455 void	mac_sysvmsq_create(struct ucred *cred, struct msqid_kernel *msqkptr);
459 int	mac_sysvsem_check_semctl(struct ucred *cred,
461 int	mac_sysvsem_check_semget(struct ucred *cred,
463 int	mac_sysvsem_check_semop(struct ucred *cred,
466 void	mac_sysvsem_create(struct ucred *cred,
471 int	mac_sysvshm_check_shmat(struct ucred *cred,
473 int	mac_sysvshm_check_shmctl(struct ucred *cred,
475 int	mac_sysvshm_check_shmdt(struct ucred *cred,
477 int	mac_sysvshm_check_shmget(struct ucred *cred,
480 void	mac_sysvshm_create(struct ucred *cred,
495 int	mac_vnode_check_access_impl(struct ucred *cred, struct vnode *dvp,
500 mac_vnode_check_access(struct ucred *cred, struct vnode *dvp,  in mac_vnode_check_access()
509 int	mac_vnode_check_chdir(struct ucred *cred, struct vnode *dvp);
510 int	mac_vnode_check_chroot(struct ucred *cred, struct vnode *dvp);
511 int	mac_vnode_check_create(struct ucred *cred, struct vnode *dvp,
513 int	mac_vnode_check_deleteacl(struct ucred *cred, struct vnode *vp,
515 int	mac_vnode_check_deleteextattr(struct ucred *cred, struct vnode *vp,
517 int	mac_vnode_check_exec(struct ucred *cred, struct vnode *vp,
519 int	mac_vnode_check_getacl(struct ucred *cred, struct vnode *vp,
521 int	mac_vnode_check_getextattr(struct ucred *cred, struct vnode *vp,
523 int	mac_vnode_check_link(struct ucred *cred, struct vnode *dvp,
525 int	mac_vnode_check_listextattr(struct ucred *cred, struct vnode *vp,
528 int	mac_vnode_check_lookup_impl(struct ucred *cred, struct vnode *dvp,
537 mac_vnode_check_lookup(struct ucred *cred, struct vnode *dvp,  in mac_vnode_check_lookup()
547 int	mac_vnode_check_mmap_impl(struct ucred *cred, struct vnode *vp, int prot,
556 mac_vnode_check_mmap(struct ucred *cred, struct vnode *vp, int prot,  in mac_vnode_check_mmap()
566 int	mac_vnode_check_open_impl(struct ucred *cred, struct vnode *vp,
575 mac_vnode_check_open(struct ucred *cred, struct vnode *vp,  in mac_vnode_check_open()
585 int	mac_vnode_check_mprotect(struct ucred *cred, struct vnode *vp,
591 int	mac_vnode_check_poll(struct ucred *active_cred,
592 	    struct ucred *file_cred, struct vnode *vp);
596 mac_vnode_check_poll(struct ucred *active_cred, struct ucred *file_cred,  in mac_vnode_check_poll()
603 int	mac_vnode_check_readdir(struct ucred *cred, struct vnode *vp);
604 int	mac_vnode_check_readlink_impl(struct ucred *cred, struct vnode *dvp);
612 mac_vnode_check_readlink(struct ucred *cred, struct vnode *vp)  in mac_vnode_check_readlink()
624 int	mac_vnode_check_rename_from(struct ucred *cred, struct vnode *dvp,
626 int	mac_vnode_check_rename_to(struct ucred *cred, struct vnode *dvp,
628 int	mac_vnode_check_revoke(struct ucred *cred, struct vnode *vp);
629 int	mac_vnode_check_setacl(struct ucred *cred, struct vnode *vp,
631 int	mac_vnode_check_setextattr(struct ucred *cred, struct vnode *vp,
633 int	mac_vnode_check_setflags(struct ucred *cred, struct vnode *vp,
635 int	mac_vnode_check_setmode(struct ucred *cred, struct vnode *vp,
637 int	mac_vnode_check_setowner(struct ucred *cred, struct vnode *vp,
639 int	mac_vnode_check_setutimes(struct ucred *cred, struct vnode *vp,
642 int	mac_vnode_check_stat_impl(struct ucred *active_cred,
643 	    struct ucred *file_cred, struct vnode *vp);
651 mac_vnode_check_stat(struct ucred *active_cred, struct ucred *file_cred,  in mac_vnode_check_stat()
661 int	mac_vnode_check_read_impl(struct ucred *active_cred,
662 	    struct ucred *file_cred, struct vnode *vp);
670 mac_vnode_check_read(struct ucred *active_cred, struct ucred *file_cred,  in mac_vnode_check_read()
680 int	mac_vnode_check_write_impl(struct ucred *active_cred,
681 	    struct ucred *file_cred, struct vnode *vp);
689 mac_vnode_check_write(struct ucred *active_cred, struct ucred *file_cred,  in mac_vnode_check_write()
699 int	mac_vnode_check_unlink(struct ucred *cred, struct vnode *dvp,
703 int	mac_vnode_create_extattr(struct ucred *cred, struct mount *mp,
706 void	mac_vnode_execve_transition(struct ucred *oldcred,
707 	    struct ucred *newcred, struct vnode *vp,
709 int	mac_vnode_execve_will_transition(struct ucred *cred,
712 void	mac_vnode_relabel(struct ucred *cred, struct vnode *vp,