83 static int	mac_vnode_setlabel_extattr(struct ucred *cred,
276 mac_vnode_create_extattr(struct ucred *cred, struct mount *mp,  in mac_vnode_create_extattr()  argument
284 	error = VOP_OPENEXTATTR(vp, cred, curthread);  in mac_vnode_create_extattr()
294 	MAC_POLICY_CHECK(vnode_create_extattr, cred, mp, mp->mnt_label, dvp,  in mac_vnode_create_extattr()
310 mac_vnode_setlabel_extattr(struct ucred *cred, struct vnode *vp,  in mac_vnode_setlabel_extattr()  argument
317 	error = VOP_OPENEXTATTR(vp, cred, curthread);  in mac_vnode_setlabel_extattr()
327 	MAC_POLICY_CHECK(vnode_setlabel_extattr, cred, vp, vp->v_label,  in mac_vnode_setlabel_extattr()
373 mac_vnode_check_access_impl(struct ucred *cred, struct vnode *vp, accmode_t accmode)  in mac_vnode_check_access_impl()  argument
379 	MAC_POLICY_CHECK(vnode_check_access, cred, vp, vp->v_label, accmode);  in mac_vnode_check_access_impl()
380 	MAC_CHECK_PROBE3(vnode_check_access, error, cred, vp, accmode);  in mac_vnode_check_access_impl()
389 mac_vnode_check_chdir(struct ucred *cred, struct vnode *dvp)  in mac_vnode_check_chdir()  argument
395 	MAC_POLICY_CHECK(vnode_check_chdir, cred, dvp, dvp->v_label);  in mac_vnode_check_chdir()
396 	MAC_CHECK_PROBE2(vnode_check_chdir, error, cred, dvp);  in mac_vnode_check_chdir()
405 mac_vnode_check_chroot(struct ucred *cred, struct vnode *dvp)  in mac_vnode_check_chroot()  argument
411 	MAC_POLICY_CHECK(vnode_check_chroot, cred, dvp, dvp->v_label);  in mac_vnode_check_chroot()
412 	MAC_CHECK_PROBE2(vnode_check_chroot, error, cred, dvp);  in mac_vnode_check_chroot()
421 mac_vnode_check_create(struct ucred *cred, struct vnode *dvp,  in mac_vnode_check_create()  argument
428 	MAC_POLICY_CHECK(vnode_check_create, cred, dvp, dvp->v_label, cnp,  in mac_vnode_check_create()
430 	MAC_CHECK_PROBE4(vnode_check_create, error, cred, dvp, cnp, vap);  in mac_vnode_check_create()
439 mac_vnode_check_deleteacl(struct ucred *cred, struct vnode *vp,  in mac_vnode_check_deleteacl()  argument
446 	MAC_POLICY_CHECK(vnode_check_deleteacl, cred, vp, vp->v_label, type);  in mac_vnode_check_deleteacl()
447 	MAC_CHECK_PROBE3(vnode_check_deleteacl, error, cred, vp, type);  in mac_vnode_check_deleteacl()
456 mac_vnode_check_deleteextattr(struct ucred *cred, struct vnode *vp,  in mac_vnode_check_deleteextattr()  argument
463 	MAC_POLICY_CHECK(vnode_check_deleteextattr, cred, vp, vp->v_label,  in mac_vnode_check_deleteextattr()
465 	MAC_CHECK_PROBE4(vnode_check_deleteextattr, error, cred, vp,  in mac_vnode_check_deleteextattr()
475 mac_vnode_check_exec(struct ucred *cred, struct vnode *vp,  in mac_vnode_check_exec()  argument
482 	MAC_POLICY_CHECK(vnode_check_exec, cred, vp, vp->v_label, imgp,  in mac_vnode_check_exec()
484 	MAC_CHECK_PROBE3(vnode_check_exec, error, cred, vp, imgp);  in mac_vnode_check_exec()
493 mac_vnode_check_getacl(struct ucred *cred, struct vnode *vp, acl_type_t type)  in mac_vnode_check_getacl()  argument
499 	MAC_POLICY_CHECK(vnode_check_getacl, cred, vp, vp->v_label, type);  in mac_vnode_check_getacl()
500 	MAC_CHECK_PROBE3(vnode_check_getacl, error, cred, vp, type);  in mac_vnode_check_getacl()
509 mac_vnode_check_getextattr(struct ucred *cred, struct vnode *vp,  in mac_vnode_check_getextattr()  argument
516 	MAC_POLICY_CHECK(vnode_check_getextattr, cred, vp, vp->v_label,  in mac_vnode_check_getextattr()
518 	MAC_CHECK_PROBE4(vnode_check_getextattr, error, cred, vp,  in mac_vnode_check_getextattr()
528 mac_vnode_check_link(struct ucred *cred, struct vnode *dvp,  in mac_vnode_check_link()  argument
536 	MAC_POLICY_CHECK(vnode_check_link, cred, dvp, dvp->v_label, vp,  in mac_vnode_check_link()
538 	MAC_CHECK_PROBE4(vnode_check_link, error, cred, dvp, vp, cnp);  in mac_vnode_check_link()
547 mac_vnode_check_listextattr(struct ucred *cred, struct vnode *vp,  in mac_vnode_check_listextattr()  argument
554 	MAC_POLICY_CHECK(vnode_check_listextattr, cred, vp, vp->v_label,  in mac_vnode_check_listextattr()
556 	MAC_CHECK_PROBE3(vnode_check_listextattr, error, cred, vp,  in mac_vnode_check_listextattr()
566 mac_vnode_check_lookup_impl(struct ucred *cred, struct vnode *dvp,  in mac_vnode_check_lookup_impl()  argument
575 	MAC_POLICY_CHECK(vnode_check_lookup, cred, dvp, dvp->v_label, cnp);  in mac_vnode_check_lookup_impl()
576 	MAC_CHECK_PROBE3(vnode_check_lookup, error, cred, dvp, cnp);  in mac_vnode_check_lookup_impl()
585 mac_vnode_check_mmap_impl(struct ucred *cred, struct vnode *vp, int prot,  in mac_vnode_check_mmap_impl()  argument
592 	MAC_POLICY_CHECK(vnode_check_mmap, cred, vp, vp->v_label, prot, flags);  in mac_vnode_check_mmap_impl()
593 	MAC_CHECK_PROBE4(vnode_check_mmap, error, cred, vp, prot, flags);  in mac_vnode_check_mmap_impl()
599 mac_vnode_check_mmap_downgrade(struct ucred *cred, struct vnode *vp,  in mac_vnode_check_mmap_downgrade()  argument
606 	MAC_POLICY_PERFORM(vnode_check_mmap_downgrade, cred, vp, vp->v_label,  in mac_vnode_check_mmap_downgrade()
616 mac_vnode_check_mprotect(struct ucred *cred, struct vnode *vp, int prot)  in mac_vnode_check_mprotect()  argument
622 	MAC_POLICY_CHECK(vnode_check_mprotect, cred, vp, vp->v_label, prot);  in mac_vnode_check_mprotect()
623 	MAC_CHECK_PROBE3(vnode_check_mprotect, error, cred, vp, prot);  in mac_vnode_check_mprotect()
632 mac_vnode_check_open_impl(struct ucred *cred, struct vnode *vp, accmode_t accmode)  in mac_vnode_check_open_impl()  argument
638 	MAC_POLICY_CHECK(vnode_check_open, cred, vp, vp->v_label, accmode);  in mac_vnode_check_open_impl()
639 	MAC_CHECK_PROBE3(vnode_check_open, error, cred, vp, accmode);  in mac_vnode_check_open_impl()
686 mac_vnode_check_readdir(struct ucred *cred, struct vnode *dvp)  in mac_vnode_check_readdir()  argument
692 	MAC_POLICY_CHECK(vnode_check_readdir, cred, dvp, dvp->v_label);  in mac_vnode_check_readdir()
693 	MAC_CHECK_PROBE2(vnode_check_readdir, error, cred, dvp);  in mac_vnode_check_readdir()
702 mac_vnode_check_readlink_impl(struct ucred *cred, struct vnode *vp)  in mac_vnode_check_readlink_impl()  argument
708 	MAC_POLICY_CHECK(vnode_check_readlink, cred, vp, vp->v_label);  in mac_vnode_check_readlink_impl()
709 	MAC_CHECK_PROBE2(vnode_check_readlink, error, cred, vp);  in mac_vnode_check_readlink_impl()
718 mac_vnode_check_relabel(struct ucred *cred, struct vnode *vp,  in mac_vnode_check_relabel()  argument
725 	MAC_POLICY_CHECK(vnode_check_relabel, cred, vp, vp->v_label, newlabel);  in mac_vnode_check_relabel()
726 	MAC_CHECK_PROBE3(vnode_check_relabel, error, cred, vp, newlabel);  in mac_vnode_check_relabel()
735 mac_vnode_check_rename_from(struct ucred *cred, struct vnode *dvp,  in mac_vnode_check_rename_from()  argument
743 	MAC_POLICY_CHECK(vnode_check_rename_from, cred, dvp, dvp->v_label, vp,  in mac_vnode_check_rename_from()
745 	MAC_CHECK_PROBE4(vnode_check_rename_from, error, cred, dvp, vp, cnp);  in mac_vnode_check_rename_from()
754 mac_vnode_check_rename_to(struct ucred *cred, struct vnode *dvp,  in mac_vnode_check_rename_to()  argument
762 	MAC_POLICY_CHECK(vnode_check_rename_to, cred, dvp, dvp->v_label, vp,  in mac_vnode_check_rename_to()
764 	MAC_CHECK_PROBE4(vnode_check_rename_to, error, cred, dvp, vp, cnp);  in mac_vnode_check_rename_to()
772 mac_vnode_check_revoke(struct ucred *cred, struct vnode *vp)  in mac_vnode_check_revoke()  argument
778 	MAC_POLICY_CHECK(vnode_check_revoke, cred, vp, vp->v_label);  in mac_vnode_check_revoke()
779 	MAC_CHECK_PROBE2(vnode_check_revoke, error, cred, vp);  in mac_vnode_check_revoke()
788 mac_vnode_check_setacl(struct ucred *cred, struct vnode *vp, acl_type_t type,  in mac_vnode_check_setacl()  argument
795 	MAC_POLICY_CHECK(vnode_check_setacl, cred, vp, vp->v_label, type, acl);  in mac_vnode_check_setacl()
796 	MAC_CHECK_PROBE4(vnode_check_setacl, error, cred, vp, type, acl);  in mac_vnode_check_setacl()
805 mac_vnode_check_setextattr(struct ucred *cred, struct vnode *vp,  in mac_vnode_check_setextattr()  argument
812 	MAC_POLICY_CHECK(vnode_check_setextattr, cred, vp, vp->v_label,  in mac_vnode_check_setextattr()
814 	MAC_CHECK_PROBE4(vnode_check_setextattr, error, cred, vp,  in mac_vnode_check_setextattr()
824 mac_vnode_check_setflags(struct ucred *cred, struct vnode *vp, u_long flags)  in mac_vnode_check_setflags()  argument
830 	MAC_POLICY_CHECK(vnode_check_setflags, cred, vp, vp->v_label, flags);  in mac_vnode_check_setflags()
831 	MAC_CHECK_PROBE3(vnode_check_setflags, error, cred, vp, flags);  in mac_vnode_check_setflags()
840 mac_vnode_check_setmode(struct ucred *cred, struct vnode *vp, mode_t mode)  in mac_vnode_check_setmode()  argument
846 	MAC_POLICY_CHECK(vnode_check_setmode, cred, vp, vp->v_label, mode);  in mac_vnode_check_setmode()
847 	MAC_CHECK_PROBE3(vnode_check_setmode, error, cred, vp, mode);  in mac_vnode_check_setmode()
856 mac_vnode_check_setowner(struct ucred *cred, struct vnode *vp, uid_t uid,  in mac_vnode_check_setowner()  argument
863 	MAC_POLICY_CHECK(vnode_check_setowner, cred, vp, vp->v_label, uid, gid);  in mac_vnode_check_setowner()
864 	MAC_CHECK_PROBE4(vnode_check_setowner, error, cred, vp, uid, gid);  in mac_vnode_check_setowner()
873 mac_vnode_check_setutimes(struct ucred *cred, struct vnode *vp,  in mac_vnode_check_setutimes()  argument
880 	MAC_POLICY_CHECK(vnode_check_setutimes, cred, vp, vp->v_label, atime,  in mac_vnode_check_setutimes()
882 	MAC_CHECK_PROBE4(vnode_check_setutimes, error, cred, vp, &atime,  in mac_vnode_check_setutimes()
911 mac_vnode_check_unlink(struct ucred *cred, struct vnode *dvp,  in mac_vnode_check_unlink()  argument
919 	MAC_POLICY_CHECK(vnode_check_unlink, cred, dvp, dvp->v_label, vp,  in mac_vnode_check_unlink()
921 	MAC_CHECK_PROBE4(vnode_check_unlink, error, cred, dvp, vp, cnp);  in mac_vnode_check_unlink()
946 mac_vnode_relabel(struct ucred *cred, struct vnode *vp,  in mac_vnode_relabel()  argument
950 	MAC_POLICY_PERFORM(vnode_relabel, cred, vp, vp->v_label, newlabel);  in mac_vnode_relabel()
954 mac_mount_create(struct ucred *cred, struct mount *mp)  in mac_mount_create()  argument
957 	MAC_POLICY_PERFORM(mount_create, cred, mp, mp->mnt_label);  in mac_mount_create()
964 mac_mount_check_stat(struct ucred *cred, struct mount *mount)  in mac_mount_check_stat()  argument
968 	MAC_POLICY_CHECK_NOSLEEP(mount_check_stat, cred, mount, mount->mnt_label);  in mac_mount_check_stat()
969 	MAC_CHECK_PROBE2(mount_check_stat, error, cred, mount);  in mac_mount_check_stat()
975 mac_devfs_create_device(struct ucred *cred, struct mount *mp,  in mac_devfs_create_device()  argument
979 	MAC_POLICY_PERFORM_NOSLEEP(devfs_create_device, cred, mp, dev, de,  in mac_devfs_create_device()
984 mac_devfs_create_symlink(struct ucred *cred, struct mount *mp,  in mac_devfs_create_symlink()  argument
988 	MAC_POLICY_PERFORM_NOSLEEP(devfs_create_symlink, cred, mp, dd,  in mac_devfs_create_symlink()
1032 vn_setlabel(struct vnode *vp, struct label *intlabel, struct ucred *cred)  in vn_setlabel()  argument
1051 	error = mac_vnode_check_relabel(cred, vp, intlabel);  in vn_setlabel()
1062 	error = VOP_ACCESS(vp, VADMIN, cred, curthread);  in vn_setlabel()
1066 	error = VOP_SETLABEL(vp, intlabel, cred, curthread);  in vn_setlabel()