| /xnu-11215/security/ |
| H A D | mac_vfs.c | 449 kauth_cred_t cred; in mac_vnode_notify_create() local
474 kauth_cred_t cred; in mac_vnode_notify_rename() local
495 kauth_cred_t cred; in mac_vnode_notify_open() local
516 kauth_cred_t cred; in mac_vnode_notify_link() local
536 kauth_cred_t cred; in mac_vnode_notify_deleteextattr() local
556 kauth_cred_t cred; in mac_vnode_notify_setacl() local
576 kauth_cred_t cred; in mac_vnode_notify_setattrlist() local
596 kauth_cred_t cred; in mac_vnode_notify_setextattr() local
616 kauth_cred_t cred; in mac_vnode_notify_setflags() local
1246 hook(cred, in mac_vnode_check_exec()
[all …]
|
| H A D | mac_policy.h | 210 kauth_cred_t cred,
246 kauth_cred_t cred,
321 kauth_cred_t cred,
354 kauth_cred_t cred,
366 kauth_cred_t cred
393 kauth_cred_t cred
554 kauth_cred_t cred,
774 kauth_cred_t cred,
789 kauth_cred_t cred
806 kauth_cred_t cred,
[all …]
|
| H A D | mac_system.c | 84 MAC_CHECK(system_check_acct, cred, vp, in mac_system_check_acct()
91 mac_system_check_host_priv(kauth_cred_t cred) in mac_system_check_host_priv() argument
102 MAC_CHECK(system_check_host_priv, cred); in mac_system_check_host_priv()
119 MAC_CHECK(system_check_info, cred, info_type); in mac_system_check_info()
125 mac_system_check_nfsd(kauth_cred_t cred) in mac_system_check_nfsd() argument
136 MAC_CHECK(system_check_nfsd, cred); in mac_system_check_nfsd()
142 mac_system_check_reboot(kauth_cred_t cred, int howto) in mac_system_check_reboot() argument
153 MAC_CHECK(system_check_reboot, cred, howto); in mac_system_check_reboot()
160 mac_system_check_settime(kauth_cred_t cred) in mac_system_check_settime() argument
171 MAC_CHECK(system_check_settime, cred); in mac_system_check_settime()
[all …]
|
| H A D | mac_socket.c | 99 MAC_CHECK(socket_check_accept, cred, in mac_socket_check_accept()
121 MAC_CHECK(socket_check_accepted, cred, in mac_socket_check_accepted()
160 MAC_CHECK(socket_check_connect, cred, in mac_socket_check_connect()
194 MAC_CHECK(socket_check_ioctl, cred, in mac_socket_check_ioctl()
211 MAC_CHECK(socket_check_stat, cred, in mac_socket_check_stat()
228 MAC_CHECK(socket_check_listen, cred, in mac_socket_check_listen()
245 MAC_CHECK(socket_check_receive, cred, in mac_socket_check_receive()
262 MAC_CHECK(socket_check_received, cred, in mac_socket_check_received()
280 MAC_CHECK(socket_check_send, cred, in mac_socket_check_send()
298 MAC_CHECK(socket_check_setsockopt, cred, in mac_socket_check_setsockopt()
[all …]
|
| H A D | mac_file.c | 51 mac_file_check_create(struct ucred *cred) in mac_file_check_create() argument
55 MAC_CHECK(file_check_create, cred); in mac_file_check_create()
64 MAC_CHECK(file_check_dup, cred, fg, NULL, newfd); in mac_file_check_dup()
83 MAC_CHECK(file_check_ioctl, cred, fg, NULL, cmd); in mac_file_check_ioctl()
92 MAC_CHECK(file_check_inherit, cred, fg, NULL); in mac_file_check_inherit()
101 MAC_CHECK(file_check_receive, cred, fg, NULL); in mac_file_check_receive()
110 MAC_CHECK(file_check_get_offset, cred, fg, NULL); in mac_file_check_get_offset()
119 MAC_CHECK(file_check_change_offset, cred, fg, NULL); in mac_file_check_change_offset()
129 MAC_CHECK(file_check_get, cred, fg, elements, len); in mac_file_check_get()
139 MAC_CHECK(file_check_set, cred, fg, buf, buflen); in mac_file_check_set()
[all …]
|
| H A D | mac_framework.h | 166 void mac_cred_label_destroy(kauth_cred_t cred);
167 struct label *mac_cred_label(kauth_cred_t cred);
170 void mac_cred_label_init(kauth_cred_t cred);
171 void mac_cred_label_seal(kauth_cred_t cred);
405 int mac_sysvmsq_check_msqctl(kauth_cred_t cred,
407 int mac_sysvmsq_check_msqget(kauth_cred_t cred,
409 int mac_sysvmsq_check_msqrcv(kauth_cred_t cred,
411 int mac_sysvmsq_check_msqsnd(kauth_cred_t cred,
422 int mac_sysvsem_check_semop(kauth_cred_t cred,
430 int mac_sysvshm_check_shmat(kauth_cred_t cred,
[all …]
|
| H A D | mac_sysv_msg.c | 106 mac_sysvmsg_label_associate(kauth_cred_t cred, struct msqid_kernel *msqptr, in mac_sysvmsg_label_associate() argument
132 mac_sysvmsq_check_enqueue(kauth_cred_t cred, struct msg *msgptr, in mac_sysvmsq_check_enqueue() argument
151 mac_sysvmsq_check_msgrcv(kauth_cred_t cred, struct msg *msgptr) in mac_sysvmsq_check_msgrcv() argument
162 MAC_CHECK(sysvmsq_check_msgrcv, cred, msgptr, mac_sysvmsg_label(msgptr)); in mac_sysvmsq_check_msgrcv()
168 mac_sysvmsq_check_msgrmid(kauth_cred_t cred, struct msg *msgptr) in mac_sysvmsq_check_msgrmid() argument
185 mac_sysvmsq_check_msqget(kauth_cred_t cred, struct msqid_kernel *msqptr) in mac_sysvmsq_check_msqget() argument
196 MAC_CHECK(sysvmsq_check_msqget, cred, msqptr, mac_sysvmsq_label(msqptr)); in mac_sysvmsq_check_msqget()
202 mac_sysvmsq_check_msqsnd(kauth_cred_t cred, struct msqid_kernel *msqptr) in mac_sysvmsq_check_msqsnd() argument
213 MAC_CHECK(sysvmsq_check_msqsnd, cred, msqptr, mac_sysvmsq_label(msqptr)); in mac_sysvmsq_check_msqsnd()
219 mac_sysvmsq_check_msqrcv(kauth_cred_t cred, struct msqid_kernel *msqptr) in mac_sysvmsq_check_msqrcv() argument
[all …]
|
| H A D | mac_posix_shm.c | 96 mac_posixshm_vnode_label_associate(kauth_cred_t cred, in mac_posixshm_vnode_label_associate() argument
100 MAC_PERFORM(vnode_label_associate_posixshm, cred, in mac_posixshm_vnode_label_associate()
105 mac_posixshm_label_associate(kauth_cred_t cred, struct pshminfo *pshm, in mac_posixshm_label_associate() argument
112 mac_posixshm_check_create(kauth_cred_t cred, const char *name) in mac_posixshm_check_create() argument
123 MAC_CHECK(posixshm_check_create, cred, name); in mac_posixshm_check_create()
146 mac_posixshm_check_mmap(kauth_cred_t cred, struct pshminfo *shm, in mac_posixshm_check_mmap() argument
158 MAC_CHECK(posixshm_check_mmap, cred, shm, mac_posixshm_label(shm), in mac_posixshm_check_mmap()
165 mac_posixshm_check_stat(kauth_cred_t cred, struct pshminfo *shm) in mac_posixshm_check_stat() argument
176 MAC_CHECK(posixshm_check_stat, cred, shm, mac_posixshm_label(shm)); in mac_posixshm_check_stat()
182 mac_posixshm_check_truncate(kauth_cred_t cred, struct pshminfo *shm, in mac_posixshm_check_truncate() argument
[all …]
|
| H A D | mac_iokit.c | 68 mac_iokit_check_open_service(kauth_cred_t cred, io_object_t service, unsigned int user_client_type) in mac_iokit_check_open_service() argument
72 MAC_CHECK(iokit_check_open_service, cred, service, user_client_type); in mac_iokit_check_open_service()
77 mac_iokit_check_open(kauth_cred_t cred, io_object_t user_client, unsigned int user_client_type) in mac_iokit_check_open() argument
81 MAC_CHECK(iokit_check_open, cred, user_client, user_client_type); in mac_iokit_check_open()
90 MAC_CHECK(iokit_check_set_properties, cred, registry_entry, properties); in mac_iokit_check_set_properties()
95 mac_iokit_check_filter_properties(kauth_cred_t cred, io_object_t registry_entry) in mac_iokit_check_filter_properties() argument
99 MAC_CHECK(iokit_check_filter_properties, cred, registry_entry); in mac_iokit_check_filter_properties()
104 mac_iokit_check_get_property(kauth_cred_t cred, io_object_t registry_entry, const char *name) in mac_iokit_check_get_property() argument
108 MAC_CHECK(iokit_check_get_property, cred, registry_entry, name); in mac_iokit_check_get_property()
113 mac_iokit_check_hid_control(kauth_cred_t cred) in mac_iokit_check_hid_control() argument
[all …]
|
| H A D | mac_posix_sem.c | 95 mac_posixsem_label_associate(kauth_cred_t cred, struct pseminfo *psem, in mac_posixsem_label_associate() argument
103 mac_posixsem_vnode_label_associate(kauth_cred_t cred, in mac_posixsem_vnode_label_associate() argument
107 MAC_PERFORM(vnode_label_associate_posixsem, cred, in mac_posixsem_vnode_label_associate()
112 mac_posixsem_check_create(kauth_cred_t cred, const char *name) in mac_posixsem_check_create() argument
123 MAC_CHECK(posixsem_check_create, cred, name); in mac_posixsem_check_create()
129 mac_posixsem_check_open(kauth_cred_t cred, struct pseminfo *psem) in mac_posixsem_check_open() argument
140 MAC_CHECK(posixsem_check_open, cred, psem, in mac_posixsem_check_open()
147 mac_posixsem_check_post(kauth_cred_t cred, struct pseminfo *psem) in mac_posixsem_check_post() argument
158 MAC_CHECK(posixsem_check_post, cred, psem, mac_posixsem_label(psem)); in mac_posixsem_check_post()
164 mac_posixsem_check_unlink(kauth_cred_t cred, struct pseminfo *psem, in mac_posixsem_check_unlink() argument
[all …]
|
| H A D | mac_pipe.c | 122 mac_pipe_label_associate(kauth_cred_t cred, struct pipe *cpipe) in mac_pipe_label_associate() argument
124 MAC_PERFORM(pipe_label_associate, cred, cpipe, mac_pipe_label(cpipe)); in mac_pipe_label_associate()
128 mac_pipe_check_kqfilter(kauth_cred_t cred, struct knote *kn, in mac_pipe_check_kqfilter() argument
143 mac_pipe_check_ioctl(kauth_cred_t cred, struct pipe *cpipe, u_long cmd) in mac_pipe_check_ioctl() argument
154 MAC_CHECK(pipe_check_ioctl, cred, cpipe, mac_pipe_label(cpipe), cmd); in mac_pipe_check_ioctl()
160 mac_pipe_check_read(kauth_cred_t cred, struct pipe *cpipe) in mac_pipe_check_read() argument
171 MAC_CHECK(pipe_check_read, cred, cpipe, mac_pipe_label(cpipe)); in mac_pipe_check_read()
194 mac_pipe_check_stat(kauth_cred_t cred, struct pipe *cpipe) in mac_pipe_check_stat() argument
205 MAC_CHECK(pipe_check_stat, cred, cpipe, mac_pipe_label(cpipe)); in mac_pipe_check_stat()
211 mac_pipe_check_write(kauth_cred_t cred, struct pipe *cpipe) in mac_pipe_check_write() argument
[all …]
|
| H A D | mac_process.c | 107 mac_cred_label_init(struct ucred *cred) in mac_cred_label_init() argument
109 cred->cr_label = mac_cred_label_alloc(); in mac_cred_label_init()
113 mac_cred_label_seal(struct ucred *cred) in mac_cred_label_seal() argument
120 (void)cred; in mac_cred_label_seal()
141 mac_cred_label(struct ucred *cred) in mac_cred_label() argument
143 return cred->cr_label; in mac_cred_label()
174 mac_cred_label_destroy(kauth_cred_t cred) in mac_cred_label_destroy() argument
177 cred->cr_label = NULL; in mac_cred_label_destroy()
279 posix_cred_t pcred = posix_cred_get(cred); in mac_cred_label_update()
788 MAC_CHECK(proc_check_setuid, cred, uid); in mac_proc_check_setuid()
[all …]
|
| H A D | mac_sysv_shm.c | 103 mac_sysvshm_label_associate(struct ucred *cred, struct shmid_kernel *shmsegptr) in mac_sysvshm_label_associate() argument
105 MAC_PERFORM(sysvshm_label_associate, cred, shmsegptr, mac_sysvshm_label(shmsegptr)); in mac_sysvshm_label_associate()
115 mac_sysvshm_check_shmat(struct ucred *cred, struct shmid_kernel *shmsegptr, in mac_sysvshm_check_shmat() argument
127 MAC_CHECK(sysvshm_check_shmat, cred, shmsegptr, mac_sysvshm_label(shmsegptr), in mac_sysvshm_check_shmat()
134 mac_sysvshm_check_shmctl(struct ucred *cred, struct shmid_kernel *shmsegptr, in mac_sysvshm_check_shmctl() argument
146 MAC_CHECK(sysvshm_check_shmctl, cred, shmsegptr, mac_sysvshm_label(shmsegptr), in mac_sysvshm_check_shmctl()
153 mac_sysvshm_check_shmdt(struct ucred *cred, struct shmid_kernel *shmsegptr) in mac_sysvshm_check_shmdt() argument
164 MAC_CHECK(sysvshm_check_shmdt, cred, shmsegptr, mac_sysvshm_label(shmsegptr)); in mac_sysvshm_check_shmdt()
170 mac_sysvshm_check_shmget(struct ucred *cred, struct shmid_kernel *shmsegptr, in mac_sysvshm_check_shmget() argument
182 MAC_CHECK(sysvshm_check_shmget, cred, shmsegptr, mac_sysvshm_label(shmsegptr), in mac_sysvshm_check_shmget()
|
| H A D | mac_audit.c | 82 mac_system_check_audit(struct ucred *cred, void *record, int length) in mac_system_check_audit() argument
86 MAC_CHECK(system_check_audit, cred, record, length); in mac_system_check_audit()
92 mac_system_check_auditon(struct ucred *cred, int cmd) in mac_system_check_auditon() argument
96 MAC_CHECK(system_check_auditon, cred, cmd); in mac_system_check_auditon()
102 mac_system_check_auditctl(struct ucred *cred, struct vnode *vp) in mac_system_check_auditctl() argument
107 MAC_CHECK(system_check_auditctl, cred, vp, vl); in mac_system_check_auditctl()
270 error = mpc->mpc_ops->mpo_audit_check_preselect(cred, in mac_audit_check_preselect()
283 error = mpc->mpc_ops->mpo_audit_check_preselect(cred, in mac_audit_check_preselect()
295 mac_audit_check_postselect(struct ucred *cred, unsigned short syscode, in mac_audit_check_postselect() argument
318 mac_error = mpc->mpc_ops->mpo_audit_check_postselect(cred, in mac_audit_check_postselect()
[all …]
|
| H A D | mac_sysv_sem.c | 101 mac_sysvsem_label_associate(kauth_cred_t cred, struct semid_kernel *semakptr) in mac_sysvsem_label_associate() argument
103 MAC_PERFORM(sysvsem_label_associate, cred, semakptr, mac_sysvsem_label(semakptr)); in mac_sysvsem_label_associate()
113 mac_sysvsem_check_semctl(kauth_cred_t cred, struct semid_kernel *semakptr, in mac_sysvsem_check_semctl() argument
125 MAC_CHECK(sysvsem_check_semctl, cred, semakptr, mac_sysvsem_label(semakptr), cmd); in mac_sysvsem_check_semctl()
131 mac_sysvsem_check_semget(kauth_cred_t cred, struct semid_kernel *semakptr) in mac_sysvsem_check_semget() argument
142 MAC_CHECK(sysvsem_check_semget, cred, semakptr, mac_sysvsem_label(semakptr)); in mac_sysvsem_check_semget()
148 mac_sysvsem_check_semop(kauth_cred_t cred, struct semid_kernel *semakptr, in mac_sysvsem_check_semop() argument
160 MAC_CHECK(sysvsem_check_semop, cred, semakptr, mac_sysvsem_label(semakptr), in mac_sysvsem_check_semop()
|
| H A D | mac_priv.c | 85 mac_priv_check(kauth_cred_t cred, int priv) in mac_priv_check() argument
89 if (!mac_cred_check_enforce(cred)) { in mac_priv_check()
93 MAC_CHECK(priv_check, cred, priv); in mac_priv_check()
103 mac_priv_grant(kauth_cred_t cred, int priv) in mac_priv_grant() argument
107 if (!mac_cred_check_enforce(cred)) { in mac_priv_grant()
111 MAC_GRANT(priv_grant, cred, priv); in mac_priv_grant()
|
| H A D | mac_kext.c | 35 mac_kext_check_load(kauth_cred_t cred, const char *identifier) in mac_kext_check_load() argument
39 MAC_CHECK(kext_check_load, cred, identifier); in mac_kext_check_load()
45 mac_kext_check_unload(kauth_cred_t cred, const char *identifier) in mac_kext_check_unload() argument
49 MAC_CHECK(kext_check_unload, cred, identifier); in mac_kext_check_unload()
55 mac_kext_check_query(kauth_cred_t cred) in mac_kext_check_query() argument
59 MAC_CHECK(kext_check_query, cred); in mac_kext_check_query()
|
| H A D | mac_mach.c | 92 struct ucred *cred = kauth_cred_get(); in mac_task_check_expose_task() local
95 MAC_CHECK(proc_check_expose_task_with_flavor, cred, &pident, flavor); in mac_task_check_expose_task()
227 kauth_cred_t cred = current_cached_proc_cred(PROC_NULL); in mac_task_check_set_task_exception_ports() local
247 cred, &pident, exception, new_behavior); in mac_task_check_set_task_exception_ports()
263 kauth_cred_t cred = current_cached_proc_cred(PROC_NULL); in mac_task_check_set_thread_exception_ports() local
283 cred, &pident, exception, new_behavior); in mac_task_check_set_thread_exception_ports()
310 kauth_cred_t cred = current_cached_proc_cred(PROC_NULL); in mac_task_check_set_host_exception_ports() local
317 cred, exception); in mac_task_check_set_host_exception_ports()
|
| /xnu-11215/bsd/kern/ |
| H A D | kern_credential.c | 3494 return cred; in current_cached_proc_cred_ref()
3548 "cred_rw:%p", cred, cred->cr_rw, cred_rw); in kauth_cred_verify_panic()
3568 kauth_cred_t cred; in kauth_cred_proc_ref() local
3573 cred = NOCRED; in kauth_cred_proc_ref()
3583 return cred; in kauth_cred_proc_ref()
3605 return cred; in __kauth_cred_proc_ref_for_pidversion_slow()
3634 return cred; in __kauth_cred_proc_ref_for_pidversion()
3764 return cred; in kauth_cred_require()
3785 return cred; in kauth_cred_ro()
3903 return posix_cred_create_internal(&cred->cr_posix, cred->cr_audit); in kauth_cred_create()
[all …]
|
| H A D | sysv_ipc.c | 101 ipcperm(kauth_cred_t cred, struct ipc_perm *perm, int mode_req) in ipcperm() argument
103 uid_t uid = kauth_cred_getuid(cred); /* avoid multiple calls */ in ipcperm()
111 if (!suser(cred, (u_short *)NULL)) { in ipcperm()
138 if ((!kauth_cred_ismember_gid(cred, perm->gid, &is_member) && is_member) && in ipcperm()
140 (!kauth_cred_ismember_gid(cred, perm->cgid, &is_member) && is_member))) { in ipcperm()
150 if ((!kauth_cred_ismember_gid(cred, perm->gid, &is_member) && is_member) || in ipcperm()
152 (!kauth_cred_ismember_gid(cred, perm->cgid, &is_member) && is_member))) { in ipcperm()
|
| H A D | kern_prot.c | 423 kauth_cred_t cred; in getgroups() local
432 kauth_cred_unref(&cred); in getgroups()
436 kauth_cred_unref(&cred); in getgroups()
443 kauth_cred_unref(&cred); in getgroups()
446 kauth_cred_unref(&cred); in getgroups()
1178 kauth_cred_t cred; in kern_settid() local
1218 kauth_cred_unref(&cred); in kern_settid()
1271 kauth_cred_t cred; in sys_settid_with_pid() local
1278 if (cred == NOCRED) { in sys_settid_with_pid()
1284 kauth_cred_unref(&cred); in sys_settid_with_pid()
[all …]
|
| H A D | kern_priv.c | 78 priv_check_cred(kauth_cred_t cred, int priv, int flags) in priv_check_cred() argument
90 error = mac_priv_check(cred, priv); in priv_check_cred()
104 if (kauth_cred_getuid(cred) == 0) { in priv_check_cred()
115 if (mac_priv_grant(cred, priv) == 0) { in priv_check_cred()
|
| /xnu-11215/bsd/security/audit/ |
| H A D | audit.c | 230 kauth_cred_t cred; in audit_record_ctor() local
237 cred = kauth_cred_proc_ref(p); in audit_record_ctor()
253 kauth_cred_unref(&cred); in audit_record_ctor()
614 kauth_cred_t cred; in audit_syscall_enter() local
643 cred = kauth_cred_proc_ref(proc); in audit_syscall_enter()
701 kauth_cred_unref(&cred); in audit_syscall_enter()
759 kauth_cred_t cred; in audit_subcall_enter() local
765 cred = kauth_cred_proc_ref(proc); in audit_subcall_enter()
806 kauth_cred_unref(&cred); in audit_subcall_enter()
828 kauth_cred_t cred; in audit_mach_syscall_enter() local
[all …]
|
| H A D | audit.h | 270 void audit_session_ref(kauth_cred_t cred);
271 void audit_session_unref(kauth_cred_t cred);
284 #define AUDIT_SESSION_REF(cred) audit_session_ref(cred) argument
285 #define AUDIT_SESSION_UNREF(cred) audit_session_unref(cred) argument
421 #define AUDIT_SESSION_REF(cred) do { \ argument
424 #define AUDIT_SESSION_UNREF(cred) do { \ argument
427 #define AUDIT_SESSION_PROCNEW(cred) do { \ argument
430 #define AUDIT_SESSION_PROCEXIT(cred) do { \ argument
433 #define AUDIT_SESSION_REF(cred) do { \ argument
436 #define AUDIT_SESSION_UNREF(cred) do { \ argument
[all …]
|
| H A D | audit_session.c | 992 KASSERT(IS_VALID_CRED(cred), in audit_session_ref()
1013 KASSERT(IS_VALID_CRED(cred), in audit_session_unref()
1030 KASSERT(IS_VALID_CRED(cred), in audit_session_procnew()
1232 kauth_cred_t cred = NULL; in audit_session_self() local
1238 if (!IS_VALID_CRED(cred)) { in audit_session_self()
1269 if (cred != NULL) { in audit_session_self()
1270 kauth_cred_unref(&cred); in audit_session_self()
1304 kauth_cred_t cred = NULL; in audit_session_port() local
1317 if (!IS_VALID_CRED(cred)) { in audit_session_port()
1381 if (cred != NULL) { in audit_session_port()
[all …]
|