xref: /xnu-11215/security/mac_iokit.c (revision e6231be0)
1 /*
2  * Copyright (c) 2007 Apple Inc. All rights reserved.
3  *
4  * @APPLE_OSREFERENCE_LICENSE_HEADER_START@
5  *
6  * This file contains Original Code and/or Modifications of Original Code
7  * as defined in and that are subject to the Apple Public Source License
8  * Version 2.0 (the 'License'). You may not use this file except in
9  * compliance with the License. The rights granted to you under the License
10  * may not be used to create, or enable the creation or redistribution of,
11  * unlawful or unlicensed copies of an Apple operating system, or to
12  * circumvent, violate, or enable the circumvention or violation of, any
13  * terms of an Apple operating system software license agreement.
14  *
15  * Please obtain a copy of the License at
16  * http://www.opensource.apple.com/apsl/ and read it before using this file.
17  *
18  * The Original Code and all software distributed under the License are
19  * distributed on an 'AS IS' basis, WITHOUT WARRANTY OF ANY KIND, EITHER
20  * EXPRESS OR IMPLIED, AND APPLE HEREBY DISCLAIMS ALL SUCH WARRANTIES,
21  * INCLUDING WITHOUT LIMITATION, ANY WARRANTIES OF MERCHANTABILITY,
22  * FITNESS FOR A PARTICULAR PURPOSE, QUIET ENJOYMENT OR NON-INFRINGEMENT.
23  * Please see the License for the specific language governing rights and
24  * limitations under the License.
25  *
26  * @APPLE_OSREFERENCE_LICENSE_HEADER_END@
27  */
28 /*-
29  * Copyright (c) 2006 SPARTA, Inc.
30  * All rights reserved.
31  *
32  * Redistribution and use in source and binary forms, with or without
33  * modification, are permitted provided that the following conditions
34  * are met:
35  * 1. Redistributions of source code must retain the above copyright
36  *    notice, this list of conditions and the following disclaimer.
37  * 2. Redistributions in binary form must reproduce the above copyright
38  *    notice, this list of conditions and the following disclaimer in the
39  *    documentation and/or other materials provided with the distribution.
40  *
41  * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND
42  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
43  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
44  * ARE DISCLAIMED.  IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
45  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
46  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
47  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
48  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
49  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
50  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
51  * SUCH DAMAGE.
52  */
53 
54 #include <sys/param.h>
55 #include <sys/types.h>
56 #include <sys/vnode.h>
57 #include <sys/vnode_internal.h>
58 #include <sys/queue.h>
59 #include <bsd/bsm/audit.h>
60 #include <bsd/security/audit/audit.h>
61 #include <bsd/sys/malloc.h>
62 #include <vm/vm_kern.h>
63 
64 #include <security/mac_framework.h>
65 #include <security/mac_internal.h>
66 
67 int
mac_iokit_check_open_service(kauth_cred_t cred,io_object_t service,unsigned int user_client_type)68 mac_iokit_check_open_service(kauth_cred_t cred, io_object_t service, unsigned int user_client_type)
69 {
70 	int error;
71 
72 	MAC_CHECK(iokit_check_open_service, cred, service, user_client_type);
73 	return error;
74 }
75 
76 int
mac_iokit_check_open(kauth_cred_t cred,io_object_t user_client,unsigned int user_client_type)77 mac_iokit_check_open(kauth_cred_t cred, io_object_t user_client, unsigned int user_client_type)
78 {
79 	int error;
80 
81 	MAC_CHECK(iokit_check_open, cred, user_client, user_client_type);
82 	return error;
83 }
84 
85 int
mac_iokit_check_set_properties(kauth_cred_t cred,io_object_t registry_entry,io_object_t properties)86 mac_iokit_check_set_properties(kauth_cred_t cred, io_object_t registry_entry, io_object_t properties)
87 {
88 	int error;
89 
90 	MAC_CHECK(iokit_check_set_properties, cred, registry_entry, properties);
91 	return error;
92 }
93 
94 int
mac_iokit_check_filter_properties(kauth_cred_t cred,io_object_t registry_entry)95 mac_iokit_check_filter_properties(kauth_cred_t cred, io_object_t registry_entry)
96 {
97 	int error;
98 
99 	MAC_CHECK(iokit_check_filter_properties, cred, registry_entry);
100 	return error;
101 }
102 
103 int
mac_iokit_check_get_property(kauth_cred_t cred,io_object_t registry_entry,const char * name)104 mac_iokit_check_get_property(kauth_cred_t cred, io_object_t registry_entry, const char *name)
105 {
106 	int error;
107 
108 	MAC_CHECK(iokit_check_get_property, cred, registry_entry, name);
109 	return error;
110 }
111 
112 int
mac_iokit_check_hid_control(kauth_cred_t cred)113 mac_iokit_check_hid_control(kauth_cred_t cred)
114 {
115 	int error;
116 
117 	MAC_CHECK(iokit_check_hid_control, cred);
118 	return error;
119 }
120