003 File Manager
Current Path:
/usr/src/sys/security/mac
usr
/
src
/
sys
/
security
/
mac
/
📁
..
📄
mac_audit.c
(4.31 KB)
📄
mac_cred.c
(8.74 KB)
📄
mac_framework.c
(19.87 KB)
📄
mac_framework.h
(25.25 KB)
📄
mac_inet.c
(10.94 KB)
📄
mac_inet6.c
(4.3 KB)
📄
mac_internal.h
(18.48 KB)
📄
mac_label.c
(4.01 KB)
📄
mac_net.c
(11.7 KB)
📄
mac_pipe.c
(6.22 KB)
📄
mac_policy.h
(46.31 KB)
📄
mac_posix_sem.c
(6.04 KB)
📄
mac_posix_shm.c
(6.95 KB)
📄
mac_priv.c
(3.17 KB)
📄
mac_process.c
(11.23 KB)
📄
mac_socket.c
(15.39 KB)
📄
mac_syscalls.c
(14.92 KB)
📄
mac_system.c
(6.33 KB)
📄
mac_sysv_msg.c
(6.86 KB)
📄
mac_sysv_sem.c
(4.44 KB)
📄
mac_sysv_shm.c
(4.9 KB)
📄
mac_vfs.c
(25.89 KB)
Editing: mac_inet6.c
/*- * Copyright (c) 2007-2009 Robert N. M. Watson * All rights reserved. * * This software was developed by Robert Watson for the TrustedBSD Project. * * This software was developed at the University of Cambridge Computer * Laboratory with support from a grant from Google, Inc. * * Redistribution and use in source and binary forms, with or without * modification, are permitted provided that the following conditions * are met: * 1. Redistributions of source code must retain the above copyright * notice, this list of conditions and the following disclaimer. * 2. Redistributions in binary form must reproduce the above copyright * notice, this list of conditions and the following disclaimer in the * documentation and/or other materials provided with the distribution. * * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF * SUCH DAMAGE. */ #include <sys/cdefs.h> __FBSDID("$FreeBSD$"); #include "opt_mac.h" #include <sys/param.h> #include <sys/kernel.h> #include <sys/lock.h> #include <sys/malloc.h> #include <sys/mutex.h> #include <sys/sbuf.h> #include <sys/systm.h> #include <sys/mount.h> #include <sys/file.h> #include <sys/namei.h> #include <sys/protosw.h> #include <sys/socket.h> #include <sys/socketvar.h> #include <sys/sysctl.h> #include <net/if.h> #include <net/if_var.h> #include <netinet/in.h> #include <netinet/ip6.h> #include <netinet6/ip6_var.h> #include <security/mac/mac_framework.h> #include <security/mac/mac_internal.h> #include <security/mac/mac_policy.h> static struct label * mac_ip6q_label_alloc(int flag) { struct label *label; int error; label = mac_labelzone_alloc(flag); if (label == NULL) return (NULL); if (flag & M_WAITOK) MAC_POLICY_CHECK(ip6q_init_label, label, flag); else MAC_POLICY_CHECK_NOSLEEP(ip6q_init_label, label, flag); if (error) { MAC_POLICY_PERFORM_NOSLEEP(ip6q_destroy_label, label); mac_labelzone_free(label); return (NULL); } return (label); } int mac_ip6q_init(struct ip6q *q6, int flag) { if (mac_labeled & MPC_OBJECT_IP6Q) { q6->ip6q_label = mac_ip6q_label_alloc(flag); if (q6->ip6q_label == NULL) return (ENOMEM); } else q6->ip6q_label = NULL; return (0); } static void mac_ip6q_label_free(struct label *label) { MAC_POLICY_PERFORM_NOSLEEP(ip6q_destroy_label, label); mac_labelzone_free(label); } void mac_ip6q_destroy(struct ip6q *q6) { if (q6->ip6q_label != NULL) { mac_ip6q_label_free(q6->ip6q_label); q6->ip6q_label = NULL; } } void mac_ip6q_reassemble(struct ip6q *q6, struct mbuf *m) { struct label *label; if (mac_policy_count == 0) return; label = mac_mbuf_to_label(m); MAC_POLICY_PERFORM_NOSLEEP(ip6q_reassemble, q6, q6->ip6q_label, m, label); } void mac_ip6q_create(struct mbuf *m, struct ip6q *q6) { struct label *label; if (mac_policy_count == 0) return; label = mac_mbuf_to_label(m); MAC_POLICY_PERFORM_NOSLEEP(ip6q_create, m, label, q6, q6->ip6q_label); } int mac_ip6q_match(struct mbuf *m, struct ip6q *q6) { struct label *label; int result; if (mac_policy_count == 0) return (1); label = mac_mbuf_to_label(m); result = 1; MAC_POLICY_BOOLEAN_NOSLEEP(ip6q_match, &&, m, label, q6, q6->ip6q_label); return (result); } void mac_ip6q_update(struct mbuf *m, struct ip6q *q6) { struct label *label; if (mac_policy_count == 0) return; label = mac_mbuf_to_label(m); MAC_POLICY_PERFORM_NOSLEEP(ip6q_update, m, label, q6, q6->ip6q_label); } void mac_netinet6_nd6_send(struct ifnet *ifp, struct mbuf *m) { struct label *mlabel; if (mac_policy_count == 0) return; mlabel = mac_mbuf_to_label(m); MAC_POLICY_PERFORM_NOSLEEP(netinet6_nd6_send, ifp, ifp->if_label, m, mlabel); }
Upload File
Create Folder