]> git.saurik.com Git - apple/xnu.git/blobdiff - bsd/kern/policy_check.c
projects / apple / xnu.git / blobdiff
? search:
summary | shortlog | log | commit | commitdiff | tree
raw | inline | side by side
xnu-7195.50.7.100.1.tar.gz
[apple/xnu.git] / bsd / kern / policy_check.c
diff --git a/bsd/kern/policy_check.c b/bsd/kern/policy_check.c
index 83581807f1397f4816a8a0f8ef542923720eca4f..7621bdec37e4b4c4c6a0dd543ab0ca955a7607bb 100644 (file)
--- a/bsd/kern/policy_check.c
+++ b/bsd/kern/policy_check.c
@@ -121,7 +121,7 @@ common_hook(void)
        return rv;
 }
 
-#if (MAC_POLICY_OPS_VERSION != 62)
+#if (MAC_POLICY_OPS_VERSION != 69)
 # error "struct mac_policy_ops doesn't match definition in mac_policy.h"
 #endif
 /*
@@ -134,10 +134,10 @@ const static struct mac_policy_ops policy_ops = {
        CHECK_SET_HOOK(audit_check_postselect)
        CHECK_SET_HOOK(audit_check_preselect)
 
-       CHECK_SET_HOOK(bpfdesc_label_associate)
-       CHECK_SET_HOOK(bpfdesc_label_destroy)
-       CHECK_SET_HOOK(bpfdesc_label_init)
-       CHECK_SET_HOOK(bpfdesc_check_receive)
+       .mpo_reserved01 = (mpo_reserved_hook_t *)common_hook,
+       .mpo_reserved02 = (mpo_reserved_hook_t *)common_hook,
+       .mpo_reserved03 = (mpo_reserved_hook_t *)common_hook,
+       .mpo_reserved04 = (mpo_reserved_hook_t *)common_hook,
 
        CHECK_SET_HOOK(cred_check_label_update_execve)
        CHECK_SET_HOOK(cred_check_label_update)
@@ -177,32 +177,29 @@ const static struct mac_policy_ops policy_ops = {
        CHECK_SET_HOOK(file_label_init)
        CHECK_SET_HOOK(file_label_destroy)
        CHECK_SET_HOOK(file_label_associate)
-
-       CHECK_SET_HOOK(ifnet_check_label_update)
-       CHECK_SET_HOOK(ifnet_check_transmit)
-       CHECK_SET_HOOK(ifnet_label_associate)
-       CHECK_SET_HOOK(ifnet_label_copy)
-       CHECK_SET_HOOK(ifnet_label_destroy)
-       CHECK_SET_HOOK(ifnet_label_externalize)
-       CHECK_SET_HOOK(ifnet_label_init)
-       CHECK_SET_HOOK(ifnet_label_internalize)
-       CHECK_SET_HOOK(ifnet_label_update)
-       CHECK_SET_HOOK(ifnet_label_recycle)
-
-       CHECK_SET_HOOK(inpcb_check_deliver)
-       CHECK_SET_HOOK(inpcb_label_associate)
-       CHECK_SET_HOOK(inpcb_label_destroy)
-       CHECK_SET_HOOK(inpcb_label_init)
-       CHECK_SET_HOOK(inpcb_label_recycle)
-       CHECK_SET_HOOK(inpcb_label_update)
-
-       CHECK_SET_HOOK(iokit_check_device)
-
-       CHECK_SET_HOOK(ipq_label_associate)
-       CHECK_SET_HOOK(ipq_label_compare)
-       CHECK_SET_HOOK(ipq_label_destroy)
-       CHECK_SET_HOOK(ipq_label_init)
-       CHECK_SET_HOOK(ipq_label_update)
+       CHECK_SET_HOOK(file_notify_close)
+
+       .mpo_reserved06 = (mpo_reserved_hook_t *)common_hook,
+       .mpo_reserved07 = (mpo_reserved_hook_t *)common_hook,
+       .mpo_reserved08 = (mpo_reserved_hook_t *)common_hook,
+       .mpo_reserved09 = (mpo_reserved_hook_t *)common_hook,
+       .mpo_reserved10 = (mpo_reserved_hook_t *)common_hook,
+       .mpo_reserved11 = (mpo_reserved_hook_t *)common_hook,
+       .mpo_reserved12 = (mpo_reserved_hook_t *)common_hook,
+       .mpo_reserved13 = (mpo_reserved_hook_t *)common_hook,
+       .mpo_reserved14 = (mpo_reserved_hook_t *)common_hook,
+       .mpo_reserved15 = (mpo_reserved_hook_t *)common_hook,
+       .mpo_reserved16 = (mpo_reserved_hook_t *)common_hook,
+       .mpo_reserved17 = (mpo_reserved_hook_t *)common_hook,
+       .mpo_reserved18 = (mpo_reserved_hook_t *)common_hook,
+       .mpo_reserved19 = (mpo_reserved_hook_t *)common_hook,
+       .mpo_reserved20 = (mpo_reserved_hook_t *)common_hook,
+       .mpo_reserved21 = (mpo_reserved_hook_t *)common_hook,
+       .mpo_reserved22 = (mpo_reserved_hook_t *)common_hook,
+       .mpo_reserved23 = (mpo_reserved_hook_t *)common_hook,
+       .mpo_reserved24 = (mpo_reserved_hook_t *)common_hook,
+       .mpo_reserved25 = (mpo_reserved_hook_t *)common_hook,
+       .mpo_reserved26 = (mpo_reserved_hook_t *)common_hook,
 
        CHECK_SET_HOOK(file_check_library_validation)
 
@@ -215,17 +212,17 @@ const static struct mac_policy_ops policy_ops = {
        CHECK_SET_HOOK(vnode_notify_setutimes)
        CHECK_SET_HOOK(vnode_notify_truncate)
 
-       CHECK_SET_HOOK(mbuf_label_associate_bpfdesc)
-       CHECK_SET_HOOK(mbuf_label_associate_ifnet)
-       CHECK_SET_HOOK(mbuf_label_associate_inpcb)
-       CHECK_SET_HOOK(mbuf_label_associate_ipq)
-       CHECK_SET_HOOK(mbuf_label_associate_linklayer)
-       CHECK_SET_HOOK(mbuf_label_associate_multicast_encap)
-       CHECK_SET_HOOK(mbuf_label_associate_netlayer)
-       CHECK_SET_HOOK(mbuf_label_associate_socket)
-       CHECK_SET_HOOK(mbuf_label_copy)
-       CHECK_SET_HOOK(mbuf_label_destroy)
-       CHECK_SET_HOOK(mbuf_label_init)
+       .mpo_reserved27 = (mpo_reserved_hook_t *)common_hook,
+       .mpo_reserved28 = (mpo_reserved_hook_t *)common_hook,
+       .mpo_reserved29 = (mpo_reserved_hook_t *)common_hook,
+       .mpo_reserved30 = (mpo_reserved_hook_t *)common_hook,
+       .mpo_reserved31 = (mpo_reserved_hook_t *)common_hook,
+       .mpo_reserved32 = (mpo_reserved_hook_t *)common_hook,
+       .mpo_reserved33 = (mpo_reserved_hook_t *)common_hook,
+       .mpo_reserved34 = (mpo_reserved_hook_t *)common_hook,
+       .mpo_reserved35 = (mpo_reserved_hook_t *)common_hook,
+       .mpo_reserved36 = (mpo_reserved_hook_t *)common_hook,
+       .mpo_reserved37 = (mpo_reserved_hook_t *)common_hook,
 
        CHECK_SET_HOOK(mount_check_fsctl)
        CHECK_SET_HOOK(mount_check_getattr)
@@ -241,24 +238,24 @@ const static struct mac_policy_ops policy_ops = {
        CHECK_SET_HOOK(mount_label_init)
        CHECK_SET_HOOK(mount_label_internalize)
 
-       CHECK_SET_HOOK(netinet_fragment)
-       CHECK_SET_HOOK(netinet_icmp_reply)
-       CHECK_SET_HOOK(netinet_tcp_reply)
+       .mpo_reserved38 = (mpo_reserved_hook_t *)common_hook,
+       .mpo_reserved39 = (mpo_reserved_hook_t *)common_hook,
+       .mpo_reserved40 = (mpo_reserved_hook_t *)common_hook,
 
        CHECK_SET_HOOK(pipe_check_ioctl)
        CHECK_SET_HOOK(pipe_check_kqfilter)
-       CHECK_SET_HOOK(pipe_check_label_update)
+       .mpo_reserved41 = (mpo_reserved_hook_t *)common_hook,
        CHECK_SET_HOOK(pipe_check_read)
        CHECK_SET_HOOK(pipe_check_select)
        CHECK_SET_HOOK(pipe_check_stat)
        CHECK_SET_HOOK(pipe_check_write)
        CHECK_SET_HOOK(pipe_label_associate)
-       CHECK_SET_HOOK(pipe_label_copy)
+       .mpo_reserved42 = (mpo_reserved_hook_t *)common_hook,
        CHECK_SET_HOOK(pipe_label_destroy)
-       CHECK_SET_HOOK(pipe_label_externalize)
+       .mpo_reserved43 = (mpo_reserved_hook_t *)common_hook,
        CHECK_SET_HOOK(pipe_label_init)
-       CHECK_SET_HOOK(pipe_label_internalize)
-       CHECK_SET_HOOK(pipe_label_update)
+       .mpo_reserved44 = (mpo_reserved_hook_t *)common_hook,
+       .mpo_reserved45 = (mpo_reserved_hook_t *)common_hook,
 
        CHECK_SET_HOOK(policy_destroy)
        /* special hooks for policy init's */
@@ -271,7 +268,7 @@ const static struct mac_policy_ops policy_ops = {
        CHECK_SET_HOOK(vnode_check_rename)
        CHECK_SET_HOOK(kext_check_query)
        CHECK_SET_HOOK(proc_notify_exec_complete)
-       .mpo_reserved4 = (mpo_reserved_hook_t *)common_hook,
+       CHECK_SET_HOOK(proc_notify_cs_invalidated)
        CHECK_SET_HOOK(proc_check_syscall_unix)
        CHECK_SET_HOOK(proc_check_expose_task)
        CHECK_SET_HOOK(proc_check_set_host_special_port)
@@ -286,7 +283,7 @@ const static struct mac_policy_ops policy_ops = {
        CHECK_SET_HOOK(vnode_check_trigger_resolve)
        CHECK_SET_HOOK(mount_check_mount_late)
        CHECK_SET_HOOK(mount_check_snapshot_mount)
-       .mpo_reserved2 = (mpo_reserved_hook_t *)common_hook,
+       CHECK_SET_HOOK(vnode_notify_reclaim)
        CHECK_SET_HOOK(skywalk_flow_check_connect)
        CHECK_SET_HOOK(skywalk_flow_check_listen)
 
@@ -323,39 +320,38 @@ const static struct mac_policy_ops policy_ops = {
        CHECK_SET_HOOK(proc_check_signal)
        CHECK_SET_HOOK(proc_check_wait)
        CHECK_SET_HOOK(proc_check_dump_core)
-
-       .mpo_reserved5 = (mpo_reserved_hook_t *)common_hook,
+       CHECK_SET_HOOK(proc_check_remote_thread_create)
 
        CHECK_SET_HOOK(socket_check_accept)
        CHECK_SET_HOOK(socket_check_accepted)
        CHECK_SET_HOOK(socket_check_bind)
        CHECK_SET_HOOK(socket_check_connect)
        CHECK_SET_HOOK(socket_check_create)
-       CHECK_SET_HOOK(socket_check_deliver)
-       CHECK_SET_HOOK(socket_check_kqfilter)
-       CHECK_SET_HOOK(socket_check_label_update)
+       .mpo_reserved46 = (mpo_reserved_hook_t *)common_hook,
+       .mpo_reserved47 = (mpo_reserved_hook_t *)common_hook,
+       .mpo_reserved48 = (mpo_reserved_hook_t *)common_hook,
        CHECK_SET_HOOK(socket_check_listen)
        CHECK_SET_HOOK(socket_check_receive)
        CHECK_SET_HOOK(socket_check_received)
-       CHECK_SET_HOOK(socket_check_select)
+       .mpo_reserved49 = (mpo_reserved_hook_t *)common_hook,
        CHECK_SET_HOOK(socket_check_send)
        CHECK_SET_HOOK(socket_check_stat)
        CHECK_SET_HOOK(socket_check_setsockopt)
        CHECK_SET_HOOK(socket_check_getsockopt)
-       CHECK_SET_HOOK(socket_label_associate_accept)
-       CHECK_SET_HOOK(socket_label_associate)
-       CHECK_SET_HOOK(socket_label_copy)
-       CHECK_SET_HOOK(socket_label_destroy)
-       CHECK_SET_HOOK(socket_label_externalize)
-       CHECK_SET_HOOK(socket_label_init)
-       CHECK_SET_HOOK(socket_label_internalize)
-       CHECK_SET_HOOK(socket_label_update)
-
-       CHECK_SET_HOOK(socketpeer_label_associate_mbuf)
-       CHECK_SET_HOOK(socketpeer_label_associate_socket)
-       CHECK_SET_HOOK(socketpeer_label_destroy)
-       CHECK_SET_HOOK(socketpeer_label_externalize)
-       CHECK_SET_HOOK(socketpeer_label_init)
+
+       .mpo_reserved50 = (mpo_reserved_hook_t *)common_hook,
+       .mpo_reserved51 = (mpo_reserved_hook_t *)common_hook,
+       .mpo_reserved52 = (mpo_reserved_hook_t *)common_hook,
+       .mpo_reserved53 = (mpo_reserved_hook_t *)common_hook,
+       .mpo_reserved54 = (mpo_reserved_hook_t *)common_hook,
+       .mpo_reserved55 = (mpo_reserved_hook_t *)common_hook,
+       .mpo_reserved56 = (mpo_reserved_hook_t *)common_hook,
+       .mpo_reserved57 = (mpo_reserved_hook_t *)common_hook,
+       .mpo_reserved58 = (mpo_reserved_hook_t *)common_hook,
+       .mpo_reserved59 = (mpo_reserved_hook_t *)common_hook,
+       .mpo_reserved60 = (mpo_reserved_hook_t *)common_hook,
+       .mpo_reserved61 = (mpo_reserved_hook_t *)common_hook,
+       .mpo_reserved62 = (mpo_reserved_hook_t *)common_hook,
 
        CHECK_SET_HOOK(system_check_acct)
        CHECK_SET_HOOK(system_check_audit)
@@ -474,7 +470,7 @@ const static struct mac_policy_ops policy_ops = {
 
        CHECK_SET_HOOK(iokit_check_set_properties)
 
-       .mpo_reserved3 = (mpo_reserved_hook_t *)common_hook,
+       CHECK_SET_HOOK(vnode_check_supplemental_signature)
 
        CHECK_SET_HOOK(vnode_check_searchfs)
 
@@ -508,7 +504,6 @@ const static struct mac_policy_ops policy_ops = {
 
        CHECK_SET_HOOK(vnode_find_sigs)
 
-
        CHECK_SET_HOOK(kext_check_load)
        CHECK_SET_HOOK(kext_check_unload)
 
mirror of XNU