mirror of
https://git.FreeBSD.org/src.git
synced 2024-12-23 11:18:54 +00:00
a557af222b
the MAC label referenced from 'struct socket' in the IPv4 and IPv6-based protocols. This permits MAC labels to be checked during network delivery operations without dereferencing inp->inp_socket to get to so->so_label, which will eventually avoid our having to grab the socket lock during delivery at the network layer. This change introduces 'struct inpcb' as a labeled object to the MAC Framework, along with the normal circus of entry points: initialization, creation from socket, destruction, as well as a delivery access control check. For most policies, the inpcb label will simply be a cache of the socket label, so a new protocol switch method is introduced, pr_sosetlabel() to notify protocols that the socket layer label has been updated so that the cache can be updated while holding appropriate locks. Most protocols implement this using pru_sosetlabel_null(), but IPv4/IPv6 protocols using inpcbs use the the worker function in_pcbsosetlabel(), which calls into the MAC Framework to perform a cache update. Biba, LOMAC, and MLS implement these entry points, as do the stub policy, and test policy. Reviewed by: sam, bms Obtained from: TrustedBSD Project Sponsored by: DARPA, Network Associates Laboratories |
||
---|---|---|
.. | ||
ipatm | ||
sigpvc | ||
spans | ||
uni | ||
atm_aal5.c | ||
atm_cm.c | ||
atm_cm.h | ||
atm_device.c | ||
atm_if.c | ||
atm_if.h | ||
atm_ioctl.h | ||
atm_pcb.h | ||
atm_proto.c | ||
atm_sap.h | ||
atm_sigmgr.h | ||
atm_signal.c | ||
atm_socket.c | ||
atm_stack.h | ||
atm_subr.c | ||
atm_sys.h | ||
atm_usrreq.c | ||
atm_var.h | ||
atm_vc.h | ||
atm.h | ||
port.h | ||
queue.h |