security/mac_port.c

   1 /*
   2  * Copyright (c) 2007 Apple Inc. All rights reserved.
   3  *
   4  * @APPLE_OSREFERENCE_LICENSE_HEADER_START@
   5  *
   6  * This file contains Original Code and/or Modifications of Original Code
   7  * as defined in and that are subject to the Apple Public Source License
   8  * Version 2.0 (the 'License'). You may not use this file except in
   9  * compliance with the License. The rights granted to you under the License
  10  * may not be used to create, or enable the creation or redistribution of,
  11  * unlawful or unlicensed copies of an Apple operating system, or to
  12  * circumvent, violate, or enable the circumvention or violation of, any
  13  * terms of an Apple operating system software license agreement.
  14  *
  15  * Please obtain a copy of the License at
  16  * http://www.opensource.apple.com/apsl/ and read it before using this file.
  17  *
  18  * The Original Code and all software distributed under the License are
  19  * distributed on an 'AS IS' basis, WITHOUT WARRANTY OF ANY KIND, EITHER
  20  * EXPRESS OR IMPLIED, AND APPLE HEREBY DISCLAIMS ALL SUCH WARRANTIES,
  21  * INCLUDING WITHOUT LIMITATION, ANY WARRANTIES OF MERCHANTABILITY,
  22  * FITNESS FOR A PARTICULAR PURPOSE, QUIET ENJOYMENT OR NON-INFRINGEMENT.
  23  * Please see the License for the specific language governing rights and
  24  * limitations under the License.
  25  *
  26  * @APPLE_OSREFERENCE_LICENSE_HEADER_END@
  27  */
  28
  29 /*-
  30  * Copyright (c) 2003, 2004 Networks Associates Technology, Inc.
  31  * Copyright (c) 2005-2006 SPARTA, Inc.
  32  * All rights reserved.
  33  *
  34  * This software was developed for the FreeBSD Project in part by Network
  35  * Associates Laboratories, the Security Research Division of Network
  36  * Associates, Inc. under DARPA/SPAWAR contract N66001-01-C-8035 ("CBOSS"),
  37  * as part of the DARPA CHATS research program.
  38  *
  39  * Redistribution and use in source and binary forms, with or without
  40  * modification, are permitted provided that the following conditions
  41  * are met:
  42  * 1. Redistributions of source code must retain the above copyright
  43  *    notice, this list of conditions and the following disclaimer.
  44  * 2. Redistributions in binary form must reproduce the above copyright
  45  *    notice, this list of conditions and the following disclaimer in the
  46  *    documentation and/or other materials provided with the distribution.
  47  *
  48  * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND
  49  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
  50  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
  51  * ARE DISCLAIMED.  IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
  52  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
  53  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
  54  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
  55  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
  56  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
  57  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
  58  * SUCH DAMAGE.
  59  *
  60  */
  61
  62 #include <security/mac_internal.h>
  63 #include <security/mac_mach_internal.h>
  64 #include <mach/message.h>
  65 #include <kern/task.h>
  66
  67 void
  68 mac_port_label_init(struct label *l)
  69 {
  70
  71         mac_label_init(l);
  72         if (mac_late == 0) {
  73                 mac_label_journal_add(l, MLJ_TYPE_PORT);
  74                 mac_label_journal(l, MLJ_PORT_OP_INIT);
  75         }
  76         MAC_PERFORM (port_label_init, l);
  77 }
  78
  79 void
  80 mac_port_label_destroy(struct label *l)
  81 {
  82
  83         MAC_PERFORM (port_label_destroy, l);
  84         if (mac_late == 0)
  85                 mac_label_journal_remove(l);
  86         mac_label_destroy(l);
  87 }
  88
  89 void
  90 mac_port_label_copy(struct label *src, struct label *dest)
  91 {
  92
  93         MAC_PERFORM(port_label_copy, src, dest);
  94 }
  95
  96 void
  97 mac_port_label_update_cred(struct label *src, struct label *dest)
  98 {
  99
 100         MAC_PERFORM(port_label_update_cred, src, dest);
 101 }
 102
 103 void
 104 mac_port_label_associate(struct label *it, struct label *st, struct label *port)
 105 {
 106
 107         if (mac_late == 0)
 108                 mac_label_journal(port, MLJ_PORT_OP_CREATE);
 109         MAC_PERFORM(port_label_associate, it, st, port);
 110 }
 111
 112 void
 113 mac_port_label_associate_kernel(struct label *port, int isreply)
 114 {
 115
 116         if (mac_late == 0)
 117                 mac_label_journal(port, MLJ_PORT_OP_CREATE_K);
 118         MAC_PERFORM(port_label_associate_kernel, port, isreply);
 119 }
 120
 121 void
 122 mac_port_label_update_kobject(struct label *port, int kotype)
 123 {
 124
 125         if (mac_late == 0)
 126                 mac_label_journal(port, MLJ_PORT_OP_UPDATE, kotype);
 127         MAC_PERFORM(port_label_update_kobject, port, kotype);
 128 }
 129
 130 int
 131 mac_port_label_internalize(struct label *label, char *string)
 132 {
 133         int error;
 134
 135         /* XXX - should have mpo_port_label_internalize */
 136         error = MAC_INTERNALIZE(cred, label, string);
 137
 138         return (error);
 139 }
 140
 141 int
 142 mac_port_label_externalize(struct label *label, char *elements,
 143     char *outbuf, size_t outbuflen, int flags __unused)
 144 {
 145         int error;
 146
 147         /* XXX - should have mpo_port_label_externalize */
 148         error = MAC_EXTERNALIZE(cred, label, elements, outbuf, outbuflen);
 149
 150         return (error);
 151 }
 152
 153 int
 154 mac_port_check_label_update(struct label *task, struct label *old,
 155     struct label *newlabel)
 156 {
 157         int error;
 158
 159         MAC_CHECK(port_check_label_update, task, old, newlabel);
 160
 161         return (error);
 162 }
 163
 164 int
 165 mac_port_check_send(struct label *task, struct label *port)
 166 {
 167         int error;
 168
 169         MAC_CHECK(port_check_send, task, port);
 170
 171         return (error);
 172 }
 173
 174 int
 175 mac_port_check_receive(struct label *task, struct label *sender)
 176 {
 177         int error;
 178
 179         MAC_CHECK(port_check_receive, task, sender);
 180
 181         return (error);
 182 }
 183
 184 int
 185 mac_port_check_make_send(struct label *task, struct label *port)
 186 {
 187         int error;
 188
 189         MAC_CHECK(port_check_make_send, task, port);
 190
 191         return (error);
 192 }
 193
 194 int
 195 mac_port_check_make_send_once(struct label *task, struct label *port)
 196 {
 197         int error;
 198
 199         MAC_CHECK(port_check_make_send_once, task, port);
 200
 201         return (error);
 202 }
 203
 204 int
 205 mac_port_check_copy_send(struct label *task, struct label *port)
 206 {
 207         int error;
 208
 209         MAC_CHECK(port_check_copy_send, task, port);
 210
 211         return (error);
 212 }
 213
 214 int
 215 mac_port_check_move_send(struct label *task, struct label *port)
 216 {
 217         int error;
 218
 219         MAC_CHECK(port_check_move_send, task, port);
 220
 221         return (error);
 222 }
 223
 224 int
 225 mac_port_check_move_send_once(struct label *task, struct label *port)
 226 {
 227         int error;
 228
 229         MAC_CHECK(port_check_move_send_once, task, port);
 230
 231         return (error);
 232 }
 233
 234 int
 235 mac_port_check_move_receive(struct label *task, struct label *port)
 236 {
 237         int error;
 238
 239         MAC_CHECK(port_check_move_receive, task, port);
 240
 241         return (error);
 242 }
 243
 244 int
 245 mac_port_check_hold_send(struct label *task, struct label *port)
 246 {
 247         int error;
 248
 249         MAC_CHECK(port_check_hold_send, task, port);
 250
 251         return (error);
 252 }
 253
 254 int
 255 mac_port_check_hold_send_once(struct label *task, struct label *port)
 256 {
 257         int error;
 258
 259         MAC_CHECK(port_check_hold_send_once, task, port);
 260
 261         return (error);
 262 }
 263
 264 int
 265 mac_port_check_hold_receive(struct label *task, struct label *port)
 266 {
 267         int error;
 268
 269         MAC_CHECK(port_check_hold_receive, task, port);
 270
 271         return (error);
 272 }
 273
 274 int
 275 mac_port_check_method(task_t task, struct label *sub, struct label *obj, int msgid)
 276 {
 277         int error;
 278
 279         MAC_CHECK(port_check_method, get_bsdtask_info(task), sub, obj, msgid);
 280
 281         return (error);
 282 }