xnu-6153.121.1.tar.gz

[apple/xnu.git] / security / mac_process.c

diff --git a/security/mac_process.c b/security/mac_process.c
index 3552fe991a1699fbfb9f885d79a2bdaf07410571..31d539af2a02b457c1fa3f34252a991bef32ba27 100644 (file)
--- a/security/mac_process.c
+++ b/security/mac_process.c
@@ -327,6 +327,26 @@ mac_proc_check_debug(proc_t curp, struct proc *proc)
        return error;
 }
 
        return error;
 }
 

+int
+mac_proc_check_dump_core(struct proc *proc)
+{
+       int error;
+
+#if SECURITY_MAC_CHECK_ENFORCE
+       /* 21167099 - only check if we allow write */
+       if (!mac_proc_enforce) {
+               return 0;
+       }
+#endif
+       if (!mac_proc_check_enforce(proc)) {
+               return 0;
+       }
+
+       MAC_CHECK(proc_check_dump_core, proc);
+
+       return error;
+}
+

 int
 mac_proc_check_fork(proc_t curp)
 {
 int
 mac_proc_check_fork(proc_t curp)
 {


@@ -506,6 +526,26 @@ mac_proc_check_signal(proc_t curp, struct proc *proc, int signum)
        return error;
 }
 
        return error;
 }
 

+int
+mac_proc_check_syscall_unix(proc_t curp, int scnum)
+{
+       int error;
+
+#if SECURITY_MAC_CHECK_ENFORCE
+       /* 21167099 - only check if we allow write */
+       if (!mac_proc_enforce) {
+               return 0;
+       }
+#endif
+       if (!mac_proc_check_enforce(curp)) {
+               return 0;
+       }
+
+       MAC_CHECK(proc_check_syscall_unix, curp, scnum);
+
+       return error;
+}
+

 int
 mac_proc_check_wait(proc_t curp, struct proc *proc)
 {
 int
 mac_proc_check_wait(proc_t curp, struct proc *proc)
 {