Robert Watson 2d92ec9858 Switch TCP over to using the inpcb label when responding in timed ... wait, rather than the socket label. This avoids reaching up to the socket layer during connection close, which requires locking changes. To do this, introduce MAC Framework entry point mac_create_mbuf_from_inpcb(), which is called from tcp_twrespond() instead of calling mac_create_mbuf_from_socket() or mac_create_mbuf_netlayer(). Introduce MAC Policy entry point mpo_create_mbuf_from_inpcb(), and implementations for various policies, which generally just copy label data from the inpcb to the mbuf. Assert the inpcb lock in the entry point since we require consistency for the inpcb label reference. Obtained from: TrustedBSD Project Sponsored by: DARPA, Network Associates Laboratories		2003-12-17 14:55:11 +00:00
..
mac	Switch TCP over to using the inpcb label when responding in timed	2003-12-17 14:55:11 +00:00
mac_biba	Switch TCP over to using the inpcb label when responding in timed	2003-12-17 14:55:11 +00:00
mac_bsdextended	Implementations of mpo_check_vnode_deleteextattr() and	2003-08-21 14:34:54 +00:00
mac_ifoff	Introduce a MAC label reference in 'struct inpcb', which caches	2003-11-18 00:39:07 +00:00
mac_lomac	Switch TCP over to using the inpcb label when responding in timed	2003-12-17 14:55:11 +00:00
mac_mls	Switch TCP over to using the inpcb label when responding in timed	2003-12-17 14:55:11 +00:00
mac_none	mac_none is now the null policy, not a stub policy, so remove the	2003-08-21 16:19:17 +00:00
mac_partition	Rename mac_create_cred() MAC Framework entry point to mac_copy_cred(),	2003-12-06 21:48:03 +00:00
mac_portacl
mac_seeotheruids
mac_stub	Switch TCP over to using the inpcb label when responding in timed	2003-12-17 14:55:11 +00:00
mac_test	Switch TCP over to using the inpcb label when responding in timed	2003-12-17 14:55:11 +00:00