opnsense-src/sys/security/mac
Mitchell Horne 2449b9e5fe mac: kdb/ddb framework hooks
Add three simple hooks to the debugger allowing for a loaded MAC policy
to intervene if desired:
 1. Before invoking the kdb backend
 2. Before ddb command registration
 3. Before ddb command execution

We extend struct db_command with a private pointer and two flag bits
reserved for policy use.

Reviewed by:	markj
Sponsored by:	Juniper Networks, Inc.
Sponsored by:	Klara, Inc.
Differential Revision:	https://reviews.freebsd.org/D35370
2022-07-18 22:06:13 +00:00
..
mac_audit.c
mac_cred.c
mac_framework.c mac: cheaper check for ifnet_create_mbuf and ifnet_check_transmit 2021-06-29 15:06:45 +02:00
mac_framework.h mac: kdb/ddb framework hooks 2022-07-18 22:06:13 +00:00
mac_inet.c tcp_input/syncache: acquire only read lock on PCB for SYN,!ACK packets 2021-04-12 08:25:31 -07:00
mac_inet6.c
mac_internal.h security: clean up empty lines in .c and .h files 2020-09-01 21:26:00 +00:00
mac_kdb.c mac: kdb/ddb framework hooks 2022-07-18 22:06:13 +00:00
mac_label.c security: clean up empty lines in .c and .h files 2020-09-01 21:26:00 +00:00
mac_net.c mac: cheaper check for ifnet_create_mbuf and ifnet_check_transmit 2021-06-29 15:06:45 +02:00
mac_pipe.c pipe: allow for lockless pipe_stat 2020-11-19 06:30:25 +00:00
mac_policy.h mac: kdb/ddb framework hooks 2022-07-18 22:06:13 +00:00
mac_posix_sem.c
mac_posix_shm.c
mac_priv.c mac: implement fast path for checks 2020-02-13 22:19:17 +00:00
mac_process.c vfs: drop the mostly unused flags argument from VOP_UNLOCK 2020-01-03 22:29:58 +00:00
mac_socket.c security: clean up empty lines in .c and .h files 2020-09-01 21:26:00 +00:00
mac_syscalls.c sysent: Get rid of bogus sys/sysent.h include. 2022-05-28 20:52:17 +03:00
mac_system.c
mac_sysv_msg.c
mac_sysv_sem.c
mac_sysv_shm.c
mac_vfs.c Add a comment on why the call to mac_vnode_relabel() might be in the wrong 2021-02-27 16:25:26 +00:00