xnu-2050.24.15.tar.gz

[apple/xnu.git] / security / mac_policy.h

diff --git a/security/mac_policy.h b/security/mac_policy.h
index 91439381351e513d92851cf7bb50674779e469c8..a5c13843e4e666c260e713e8e5ccf5cc16bda1ce 100644 (file)
--- a/security/mac_policy.h
+++ b/security/mac_policy.h
@@ -6008,6 +6008,23 @@ typedef int mpo_vnode_notify_create_t(
        struct componentname *cnp
 );
 
+/**
+  @brief Inform MAC policies that a vnode has been opened
+  @param cred User credential for the creating process
+  @param vp vnode opened
+  @param label Policy label for the vp
+  @param acc_mode open(2) access mode used
+
+  Inform Mac policies that a vnode have been successfully opened
+  (passing all MAC polices and DAC).
+*/
+typedef void mpo_vnode_notify_open_t(
+       kauth_cred_t cred,
+       struct vnode *vp,
+       struct label *label,
+       int acc_mode
+);
+
 /**
   @brief Inform MAC policies that a vnode has been renamed
   @param cred User credential for the renaming process
@@ -6362,7 +6379,7 @@ struct mac_policy_ops {
        mpo_thread_label_destroy_t              *mpo_thread_label_destroy;
        mpo_system_check_kas_info_t     *mpo_system_check_kas_info;
        mpo_reserved_hook_t                     *mpo_reserved18;
-       mpo_reserved_hook_t                     *mpo_reserved19;
+       mpo_vnode_notify_open_t                 *mpo_vnode_notify_open;
        mpo_reserved_hook_t                     *mpo_reserved20;
        mpo_reserved_hook_t                     *mpo_reserved21;
        mpo_reserved_hook_t                     *mpo_reserved22;