Robert Watson 2d92ec9858 Switch TCP over to using the inpcb label when responding in timed ... wait, rather than the socket label. This avoids reaching up to the socket layer during connection close, which requires locking changes. To do this, introduce MAC Framework entry point mac_create_mbuf_from_inpcb(), which is called from tcp_twrespond() instead of calling mac_create_mbuf_from_socket() or mac_create_mbuf_netlayer(). Introduce MAC Policy entry point mpo_create_mbuf_from_inpcb(), and implementations for various policies, which generally just copy label data from the inpcb to the mbuf. Assert the inpcb lock in the entry point since we require consistency for the inpcb label reference. Obtained from: TrustedBSD Project Sponsored by: DARPA, Network Associates Laboratories		2003-12-17 14:55:11 +00:00
..
mac_framework.c	Implement sockets support for __mac_get_fd() and __mac_set_fd()	2003-11-16 23:31:45 +00:00
mac_framework.h	Switch TCP over to using the inpcb label when responding in timed	2003-12-17 14:55:11 +00:00
mac_internal.h	Implement sockets support for __mac_get_fd() and __mac_set_fd()	2003-11-16 23:31:45 +00:00
mac_label.c	Modify the MAC Framework so that instead of embedding a (struct label)	2003-11-12 03:14:31 +00:00
mac_net.c	Switch TCP over to using the inpcb label when responding in timed	2003-12-17 14:55:11 +00:00
mac_pipe.c	Modify the MAC Framework so that instead of embedding a (struct label)	2003-11-12 03:14:31 +00:00
mac_policy.h	Switch TCP over to using the inpcb label when responding in timed	2003-12-17 14:55:11 +00:00
mac_process.c	Rename mac_create_cred() MAC Framework entry point to mac_copy_cred(),	2003-12-06 21:48:03 +00:00
mac_syscalls.c	Implement sockets support for __mac_get_fd() and __mac_set_fd()	2003-11-16 23:31:45 +00:00
mac_system.c	Modify the MAC Framework so that instead of embedding a (struct label)	2003-11-12 03:14:31 +00:00
mac_vfs.c	Modify the MAC Framework so that instead of embedding a (struct label)	2003-11-12 03:14:31 +00:00