98 static int	mls_label_size = sizeof(struct mac_mls);
123 #define	SLOT(l)	((struct mac_mls *)mac_label_get((l), mls_slot))
138 static struct mac_mls *
146 mls_free(struct mac_mls *mm)  in mls_free()
156 mls_atmostflags(struct mac_mls *mm, int flags)  in mls_atmostflags()
217 mls_range_in_range(struct mac_mls *rangea, struct mac_mls *rangeb)  in mls_range_in_range()
227 mls_effective_in_range(struct mac_mls *effective, struct mac_mls *range)  in mls_effective_in_range()
244 mls_dominate_effective(struct mac_mls *a, struct mac_mls *b)  in mls_dominate_effective()
266 mls_equal_effective(struct mac_mls *a, struct mac_mls *b)  in mls_equal_effective()
278 mls_contains_equal(struct mac_mls *mm)  in mls_contains_equal()
296 mls_subject_privileged(struct mac_mls *mm)  in mls_subject_privileged()
321 mls_valid(struct mac_mls *mm)  in mls_valid()
393 mls_set_range(struct mac_mls *mm, u_short typelow, u_short levellow,  in mls_set_range()
412 mls_set_effective(struct mac_mls *mm, u_short type, u_short level,  in mls_set_effective()
425 mls_copy_range(struct mac_mls *labelfrom, struct mac_mls *labelto)  in mls_copy_range()
437 mls_copy_effective(struct mac_mls *labelfrom, struct mac_mls *labelto)  in mls_copy_effective()
448 mls_copy(struct mac_mls *source, struct mac_mls *dest)  in mls_copy()
464 	zone_mls = uma_zcreate("mac_mls", sizeof(struct mac_mls), NULL,  in mls_init()
552 mls_to_string(struct sbuf *sb, struct mac_mls *mm)  in mls_to_string()
584 	struct mac_mls *mm;  in mls_externalize_label()
653 mls_parse(struct mac_mls *mm, char *string)  in mls_parse()
709 	struct mac_mls *mm, mm_temp;  in mls_internalize_label()
742 	struct mac_mls *a, *b;  in mls_bpfdesc_check_receive()
758 	struct mac_mls *source, *dest;  in mls_bpfdesc_create()
770 	struct mac_mls *source, *dest;  in mls_bpfdesc_create_mbuf()
781 	struct mac_mls *label;  in mls_cred_associate_nfsd()
792 	struct mac_mls *subj, *new;  in mls_cred_check_relabel()
852 	struct mac_mls *subj, *obj;  in mls_cred_check_visible()
870 	struct mac_mls *dest;  in mls_cred_create_init()
882 	struct mac_mls *dest;  in mls_cred_create_swapper()
894 	struct mac_mls *source, *dest;  in mls_cred_relabel()
906 	struct mac_mls *mm;  in mls_devfs_create_device()
934 	struct mac_mls *mm;  in mls_devfs_create_directory()
945 	struct mac_mls *source, *dest;  in mls_devfs_create_symlink()
957 	struct mac_mls *source, *dest;  in mls_devfs_update()
970 	struct mac_mls *source, *dest;  in mls_devfs_vnode_associate()
982 	struct mac_mls *subj, *new;  in mls_ifnet_check_relabel()
1006 	struct mac_mls *p, *i;  in mls_ifnet_check_transmit()
1020 	struct mac_mls *dest;  in mls_ifnet_create()
1038 	struct mac_mls *source, *dest;  in mls_ifnet_create_mbuf()
1050 	struct mac_mls *source, *dest;  in mls_ifnet_relabel()
1062 	struct mac_mls *p, *i;  in mls_inpcb_check_deliver()
1077 	struct mac_mls *subj, *obj;  in mls_inpcb_check_visible()
1095 	struct mac_mls *source, *dest;  in mls_inpcb_create()
1107 	struct mac_mls *source, *dest;  in mls_inpcb_create_mbuf()
1119 	struct mac_mls *source, *dest;  in mls_inpcb_sosetlabel()
1133 	struct mac_mls *source, *dest;  in mls_ip6q_create()
1145 	struct mac_mls *a, *b;  in mls_ip6q_match()
1157 	struct mac_mls *source, *dest;  in mls_ip6q_reassemble()
1178 	struct mac_mls *source, *dest;  in mls_ipq_create()
1190 	struct mac_mls *a, *b;  in mls_ipq_match()
1202 	struct mac_mls *source, *dest;  in mls_ipq_reassemble()
1223 	struct mac_mls *subj, *obj;  in mls_mount_check_stat()
1240 	struct mac_mls *source, *dest;  in mls_mount_create()
1252 	struct mac_mls *dest;  in mls_netinet_arp_send()
1263 	struct mac_mls *source, *dest;  in mls_netinet_firewall_reply()
1274 	struct mac_mls *dest;  in mls_netinet_firewall_send()
1286 	struct mac_mls *source, *dest;  in mls_netinet_fragment()
1298 	struct mac_mls *source, *dest;  in mls_netinet_icmp_reply()
1310 	struct mac_mls *dest;  in mls_netinet_igmp_send()
1321 	struct mac_mls *dest;  in mls_netinet6_nd6_send()
1345 	struct mac_mls *subj, *obj;  in mls_pipe_check_poll()
1363 	struct mac_mls *subj, *obj;  in mls_pipe_check_read()
1381 	struct mac_mls *subj, *obj, *new;  in mls_pipe_check_relabel()
1432 	struct mac_mls *subj, *obj;  in mls_pipe_check_stat()
1450 	struct mac_mls *subj, *obj;  in mls_pipe_check_write()
1468 	struct mac_mls *source, *dest;  in mls_pipe_create()
1480 	struct mac_mls *source, *dest;  in mls_pipe_relabel()
1492 	struct mac_mls *subj, *obj;  in mls_posixsem_check_openunlink()
1510 	struct mac_mls *subj, *obj;  in mls_posixsem_check_rdonly()
1528 	struct mac_mls *subj, *obj;  in mls_posixsem_check_setmode()
1546 	struct mac_mls *subj, *obj;  in mls_posixsem_check_setowner()
1564 	struct mac_mls *subj, *obj;  in mls_posixsem_check_write()
1582 	struct mac_mls *source, *dest;  in mls_posixsem_create()
1594 	struct mac_mls *subj, *obj;  in mls_posixshm_check_mmap()
1618 	struct mac_mls *subj, *obj;  in mls_posixshm_check_open()
1642 	struct mac_mls *subj, *obj;  in mls_posixshm_check_read()
1660 	struct mac_mls *subj, *obj;  in mls_posixshm_check_setmode()
1678 	struct mac_mls *subj, *obj;  in mls_posixshm_check_setowner()
1696 	struct mac_mls *subj, *obj;  in mls_posixshm_check_stat()
1714 	struct mac_mls *subj, *obj;  in mls_posixshm_check_truncate()
1732 	struct mac_mls *subj, *obj;  in mls_posixshm_check_unlink()
1750 	struct mac_mls *subj, *obj;  in mls_posixshm_check_write()
1768 	struct mac_mls *source, *dest;  in mls_posixshm_create()
1779 	struct mac_mls *subj, *obj;  in mls_proc_check_debug()
1799 	struct mac_mls *subj, *obj;  in mls_proc_check_sched()
1819 	struct mac_mls *subj, *obj;  in mls_proc_check_signal()
1840 	struct mac_mls *p, *s;  in mls_socket_check_deliver()
1860 	struct mac_mls *subj, *obj, *new;  in mls_socket_check_relabel()
1913 	struct mac_mls *subj, *obj;  in mls_socket_check_visible()
1935 	struct mac_mls *source, *dest;  in mls_socket_create()
1947 	struct mac_mls *source, *dest;  in mls_socket_create_mbuf()
1961 	struct mac_mls source, *dest;  in mls_socket_newconn()
1978 	struct mac_mls *source, *dest;  in mls_socket_relabel()
1992 	struct mac_mls *source, *dest;  in mls_socketpeer_set_from_mbuf()
2007 	struct mac_mls source, *dest;  in mls_socketpeer_set_from_socket()
2023 	struct mac_mls *source, *dest;  in mls_syncache_create()
2035 	struct mac_mls *source, *dest;  in mls_syncache_create_mbuf()
2047 	struct mac_mls *subj, *obj;  in mls_system_check_acct()
2069 	struct mac_mls *subj, *obj;  in mls_system_check_auditctl()
2088 	struct mac_mls *subj, *obj;  in mls_system_check_swapon()
2107 	bzero(SLOT(msglabel), sizeof(struct mac_mls));  in mls_sysvmsg_cleanup()
2114 	struct mac_mls *source, *dest;  in mls_sysvmsg_create()
2127 	struct mac_mls *subj, *obj;  in mls_sysvmsq_check_msgrcv()
2145 	struct mac_mls *subj, *obj;  in mls_sysvmsq_check_msgrmid()
2163 	struct mac_mls *subj, *obj;  in mls_sysvmsq_check_msqget()
2181 	struct mac_mls *subj, *obj;  in mls_sysvmsq_check_msqsnd()
2199 	struct mac_mls *subj, *obj;  in mls_sysvmsq_check_msqrcv()
2217 	struct mac_mls *subj, *obj;  in mls_sysvmsq_check_msqctl()
2248 	bzero(SLOT(msqlabel), sizeof(struct mac_mls));  in mls_sysvmsq_cleanup()
2255 	struct mac_mls *source, *dest;  in mls_sysvmsq_create()
2267 	struct mac_mls *subj, *obj;  in mls_sysvsem_check_semctl()
2305 	struct mac_mls *subj, *obj;  in mls_sysvsem_check_semget()
2323 	struct mac_mls *subj, *obj;  in mls_sysvsem_check_semop()
2346 	bzero(SLOT(semalabel), sizeof(struct mac_mls));  in mls_sysvsem_cleanup()
2353 	struct mac_mls *source, *dest;  in mls_sysvsem_create()
2365 	struct mac_mls *subj, *obj;  in mls_sysvshm_check_shmat()
2387 	struct mac_mls *subj, *obj;  in mls_sysvshm_check_shmctl()
2419 	struct mac_mls *subj, *obj;  in mls_sysvshm_check_shmget()
2437 	bzero(SLOT(shmlabel), sizeof(struct mac_mls));  in mls_sysvshm_cleanup()
2444 	struct mac_mls *source, *dest;  in mls_sysvshm_create()
2456 	struct mac_mls mm_temp, *source, *dest;  in mls_vnode_associate_extattr()
2496 	struct mac_mls *source, *dest;  in mls_vnode_associate_singlelabel()
2508 	struct mac_mls *subj, *obj;  in mls_vnode_check_chdir()
2526 	struct mac_mls *subj, *obj;  in mls_vnode_check_chroot()
2544 	struct mac_mls *subj, *obj;  in mls_vnode_check_create()
2562 	struct mac_mls *subj, *obj;  in mls_vnode_check_deleteacl()
2580 	struct mac_mls *subj, *obj;  in mls_vnode_check_deleteextattr()
2599 	struct mac_mls *subj, *obj, *exec;  in mls_vnode_check_exec()
2630 	struct mac_mls *subj, *obj;  in mls_vnode_check_getacl()
2648 	struct mac_mls *subj, *obj;  in mls_vnode_check_getextattr()
2667 	struct mac_mls *subj, *obj;  in mls_vnode_check_link()
2690 	struct mac_mls *subj, *obj;  in mls_vnode_check_listextattr()
2708 	struct mac_mls *subj, *obj;  in mls_vnode_check_lookup()
2726 	struct mac_mls *subj, *obj;  in mls_vnode_check_mmap()
2754 	struct mac_mls *subj, *obj;  in mls_vnode_check_open()
2779 	struct mac_mls *subj, *obj;  in mls_vnode_check_poll()
2797 	struct mac_mls *subj, *obj;  in mls_vnode_check_read()
2815 	struct mac_mls *subj, *obj;  in mls_vnode_check_readdir()
2833 	struct mac_mls *subj, *obj;  in mls_vnode_check_readlink()
2851 	struct mac_mls *old, *new, *subj;  in mls_vnode_check_relabel()
2903 	struct mac_mls *subj, *obj;  in mls_vnode_check_rename_from()
2927 	struct mac_mls *subj, *obj;  in mls_vnode_check_rename_to()
2952 	struct mac_mls *subj, *obj;  in mls_vnode_check_revoke()
2970 	struct mac_mls *subj, *obj;  in mls_vnode_check_setacl()
2988 	struct mac_mls *subj, *obj;  in mls_vnode_check_setextattr()
3008 	struct mac_mls *subj, *obj;  in mls_vnode_check_setflags()
3026 	struct mac_mls *subj, *obj;  in mls_vnode_check_setmode()
3044 	struct mac_mls *subj, *obj;  in mls_vnode_check_setowner()
3062 	struct mac_mls *subj, *obj;  in mls_vnode_check_setutimes()
3080 	struct mac_mls *subj, *obj;  in mls_vnode_check_stat()
3099 	struct mac_mls *subj, *obj;  in mls_vnode_check_unlink()
3122 	struct mac_mls *subj, *obj;  in mls_vnode_check_write()
3141 	struct mac_mls *source, *dest, mm_temp;  in mls_vnode_create_extattr()
3163 	struct mac_mls *source, *dest;  in mls_vnode_relabel()
3175 	struct mac_mls *source, mm_temp;  in mls_vnode_setlabel_extattr()
3420 MAC_POLICY_SET(&mls_ops, mac_mls, "TrustedBSD MAC/MLS",