#include <sys/cdefs.h>
#include <sys/param.h>
#include <sys/systm.h>
#include <sys/kernel.h>
#include <sys/lock.h>
#include <sys/malloc.h>
#include <sys/sbuf.h>
#include <sys/systm.h>
#include <sys/vnode.h>
#include <sys/mount.h>
#include <sys/file.h>
#include <sys/namei.h>
#include <sys/sysctl.h>
#include <sys/msg.h>
#include <security/mac_internal.h>
static struct label *
mac_sysv_msgmsg_label_alloc(void)
{
struct label *label;
label = mac_labelzone_alloc(MAC_WAITOK);
if (label == NULL) {
return NULL;
}
MAC_PERFORM(sysvmsg_label_init, label);
return label;
}
void
mac_sysvmsg_label_init(struct msg *msgptr)
{
msgptr->label = mac_sysv_msgmsg_label_alloc();
}
static struct label *
mac_sysv_msgqueue_label_alloc(void)
{
struct label *label;
label = mac_labelzone_alloc(MAC_WAITOK);
if (label == NULL) {
return NULL;
}
MAC_PERFORM(sysvmsq_label_init, label);
return label;
}
void
mac_sysvmsq_label_init(struct msqid_kernel *msqptr)
{
msqptr->label = mac_sysv_msgqueue_label_alloc();
}
void
mac_sysvmsg_label_associate(kauth_cred_t cred, struct msqid_kernel *msqptr,
struct msg *msgptr)
{
MAC_PERFORM(sysvmsg_label_associate, cred, msqptr, msqptr->label,
msgptr, msgptr->label);
}
void
mac_sysvmsq_label_associate(kauth_cred_t cred, struct msqid_kernel *msqptr)
{
MAC_PERFORM(sysvmsq_label_associate, cred, msqptr, msqptr->label);
}
void
mac_sysvmsg_label_recycle(struct msg *msgptr)
{
MAC_PERFORM(sysvmsg_label_recycle, msgptr->label);
}
void
mac_sysvmsq_label_recycle(struct msqid_kernel *msqptr)
{
MAC_PERFORM(sysvmsq_label_recycle, msqptr->label);
}
int
mac_sysvmsq_check_enqueue(kauth_cred_t cred, struct msg *msgptr,
struct msqid_kernel *msqptr)
{
int error;
#if SECURITY_MAC_CHECK_ENFORCE
if (!mac_sysvmsg_enforce) {
return 0;
}
#endif
MAC_CHECK(sysvmsq_check_enqueue, cred, msgptr, msgptr->label, msqptr,
msqptr->label);
return error;
}
int
mac_sysvmsq_check_msgrcv(kauth_cred_t cred, struct msg *msgptr)
{
int error;
#if SECURITY_MAC_CHECK_ENFORCE
if (!mac_sysvmsg_enforce) {
return 0;
}
#endif
MAC_CHECK(sysvmsq_check_msgrcv, cred, msgptr, msgptr->label);
return error;
}
int
mac_sysvmsq_check_msgrmid(kauth_cred_t cred, struct msg *msgptr)
{
int error;
#if SECURITY_MAC_CHECK_ENFORCE
if (!mac_sysvmsg_enforce) {
return 0;
}
#endif
MAC_CHECK(sysvmsq_check_msgrmid, cred, msgptr, msgptr->label);
return error;
}
int
mac_sysvmsq_check_msqget(kauth_cred_t cred, struct msqid_kernel *msqptr)
{
int error;
#if SECURITY_MAC_CHECK_ENFORCE
if (!mac_sysvmsg_enforce) {
return 0;
}
#endif
MAC_CHECK(sysvmsq_check_msqget, cred, msqptr, msqptr->label);
return error;
}
int
mac_sysvmsq_check_msqsnd(kauth_cred_t cred, struct msqid_kernel *msqptr)
{
int error;
#if SECURITY_MAC_CHECK_ENFORCE
if (!mac_sysvmsg_enforce) {
return 0;
}
#endif
MAC_CHECK(sysvmsq_check_msqsnd, cred, msqptr, msqptr->label);
return error;
}
int
mac_sysvmsq_check_msqrcv(kauth_cred_t cred, struct msqid_kernel *msqptr)
{
int error;
#if SECURITY_MAC_CHECK_ENFORCE
if (!mac_sysvmsg_enforce) {
return 0;
}
#endif
MAC_CHECK(sysvmsq_check_msqrcv, cred, msqptr, msqptr->label);
return error;
}
int
mac_sysvmsq_check_msqctl(kauth_cred_t cred, struct msqid_kernel *msqptr,
int cmd)
{
int error;
#if SECURITY_MAC_CHECK_ENFORCE
if (!mac_sysvmsg_enforce) {
return 0;
}
#endif
MAC_CHECK(sysvmsq_check_msqctl, cred, msqptr, msqptr->label, cmd);
return error;
}