From owner-p4-projects Mon Jan 13 22:59:14 2003 Delivered-To: p4-projects@freebsd.org Received: by hub.freebsd.org (Postfix, from userid 32767) id 94DBE37B405; Mon, 13 Jan 2003 22:58:57 -0800 (PST) Delivered-To: perforce@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 29A7237B401 for ; Mon, 13 Jan 2003 22:58:57 -0800 (PST) Received: from repoman.freebsd.org (repoman.freebsd.org [216.136.204.115]) by mx1.FreeBSD.org (Postfix) with ESMTP id 4461D43ED8 for ; Mon, 13 Jan 2003 22:58:56 -0800 (PST) (envelope-from chris@freebsd.org) Received: from repoman.freebsd.org (localhost [127.0.0.1]) by repoman.freebsd.org (8.12.6/8.12.6) with ESMTP id h0E6wufh051673 for ; Mon, 13 Jan 2003 22:58:56 -0800 (PST) (envelope-from chris@freebsd.org) Received: (from perforce@localhost) by repoman.freebsd.org (8.12.6/8.12.6/Submit) id h0E6wt0l051670 for perforce@freebsd.org; Mon, 13 Jan 2003 22:58:55 -0800 (PST) Date: Mon, 13 Jan 2003 22:58:55 -0800 (PST) Message-Id: <200301140658.h0E6wt0l051670@repoman.freebsd.org> X-Authentication-Warning: repoman.freebsd.org: perforce set sender to chris@freebsd.org using -f From: Chris Costello Subject: PERFORCE change 23723 for review To: Perforce Change Reviews Sender: owner-p4-projects@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG http://perforce.freebsd.org/chv.cgi?CH=23723 Change 23723 by chris@chris_holly on 2003/01/13 22:58:55 Remove entry points which no longer exist. Affected files ... .. //depot/projects/trustedbsd/doc/en_US.ISO8859-1/books/developers-handbook/mac/chapter.sgml#27 edit Differences ... ==== //depot/projects/trustedbsd/doc/en_US.ISO8859-1/books/developers-handbook/mac/chapter.sgml#27 (text+ko) ==== @@ -760,127 +760,6 @@ available. - - <function>&mac.mpo;_create_devfs_vnode</function> - - - - void - &mac.mpo;_create_devfs_vnode - - struct devfs_dirent - *devfs_dirent - struct label - *direntlabel - struct vnode - *vp - struct label - *vnodelabel - - - - - - &mac.thead; - - - - devfs_dirent - Object; devfs directory entry - - - - direntlabel - Policy label for - devfs_dirent - - - - vp - Object; file system object being labeled - - - - vnodelabel - Policy label to be filled in for - vp - - - - - - Fill out the label on the vnode being created for the - passed devfs_dirent. This call will be made when a vnode is - required to represent the specified devfs_dirent in a - mounted devfs instance. - - - - <function>&mac.mpo;_vnode_create_from_vnode</function> - - - - void - &mac.mpo;_vnode_create_from_vnode - - struct ucred - *cred - struct vnode - *parent - struct label - *parentlabel - struct vnode - *child - struct label - *childlabel - - - - - - &mac.thead; - - - - cred - Subject credential - - - - parent - Parent vnode; the directory in which - child is being - created - - - - parentlabel - Policy label for - parent - - - - child - New vnode - - - - childlabel - Label to be filled in for - child - - - - - - Fill out the label on the vnode being created in the - passed vnode parent by the passed subject credential. This - call will be made when a vnode is allocated during a vnode - creation operation. For example, this call is made by - multi-label file systems during the creation of a new file - or directory. - - <function>&mac.mpo;_create_mount</function> @@ -1218,227 +1097,6 @@ mac_vnode_create_from_vnode to initialize the vnode label. - - - <function>&mac.mpo;_update_procfsvnode</function> - - - - void - &mac.mpo;_update_procfsvnode - - struct vnode - *vp - struct label - *vnodelabel - struct ucred - *cred - - - - - - &mac.thead; - - - - vp - Object; procfs vnode - Locked - - - - vnodelabel - Policy label to be filled in for - vp - - - - cred - Subject; credential for the process - entry - Immutable - - - - - - Update the procfs vnode label from the passed subject - credential. This call will be made when an operation on a - procfs vnode requires a fresh label on a process-derived - vnode. - - - - <function>&mac.mpo;_update_vnode_from_extattr</function> - - - - int - &mac.mpo;_update_vnode_from_extattr - - struct vnode - *vp - struct label - *vnodelabel - struct mount - *mp - struct label - *fslabel - - - - - - &mac.thead; - - - - vp - Object; vnode whose label is being updated - Locked - - - - vnodelabel - Policy label to refresh - - - - mp - Mount point for - vp - - - - fslabel - Policy label for vp's - file system. - - - - - - Update the vnode label by refreshing the label data from - the extended attribute service for the vnode. The mount - point fslabel is also made available - so that the fslabel may be used as a - labeling source if fallback is appropriate for the policy. - This call is permitted to fail; if the call fails, the - associated label refresh will also fail, causing the failure - of the operation requiring the MAC check and vnode label - refresh, permitting a fail closed policy if - labeling data is not available. - - - - <function>&mac.mpo;_update_from_externalized</function> - - - - int - &mac.mpo;_update_from_externalized - - struct vnode - *vp - struct label - *vnodelabel - struct mac - *extmac - - - - - - &mac.thead; - - - - vp - Object; vnode - Locked - - - - vnodelabel - Policy label for - vp - - - - extmac - Externalized MAC policy label - - - - - - Update the vnode label from the passed externalized - label loaded from disk by the MAC framework. This call is - permitted to fail; if the call fails, the associated label - refresh will also fail, causing the failure of the operation - requiring the MAC check and vnode label refresh, permitting - a fail closed policy if labeling data is not - available. This call will be obsoleted by the new extended - attribute labeling interface. - - - - <function>&mac.mpo;_update_vnode_from_mount</function> - - - - void - &mac.mpo;_update_vnode_from_mount - - struct vnode - *vp - struct label - *vnodelabel - struct mount - *mp - struct label - *mountlabel - - - - - - &mac.thead; - - - - vp - Object; vnode - Locked - - - - vnodelabel - Policy label for - vp - - - - mp - Mount point where vp - resides - - - - fslabel - Policy label for the file system where - vp resides. - - - - - - Update the vnode label from the passed mount point - label. This call is made when a single label file system - vnode requires a label, or if the obsoleted MAC framework - externalized extended attribute read fails. - @@ -4997,12 +4655,12 @@ - <function>&mac.mpo;_check_mmap_downgrade</function> + <function>&mac.mpo;_check_vnode_mmap_downgrade</function> void - &mac.mpo;_check_mmap_downgrade + &mac.mpo;_check_vnode_mmap_downgrade struct ucred *cred @@ -5557,159 +5215,6 @@ process. - - <function>&mac.mpo;_check_rename_from_vnode</function> - - - - int - &mac.mpo;_check_rename_from_vnode - - struct ucred - *cred - struct vnode - *dvp - struct label - *dlabel - struct vnode - *vp - struct label - *label - struct componentname - *cnp - - - - - - &mac.thead; - - - - cred - Subject credential - - - - dvp - Directory vnode - - - - dlabel - Policy label for - dvp - - - - vp - Object; vnode - - - - label - Policy label for - vp - - - - - cnp - Pathname - - - - - - Determine whether the subject credential can rename the - passed vnode (vp) in the passed - directory (dvp) using the passed name - (cnp). This call will be made in - combination with a follow-up call to - mpo_check_rename_to_vnode. Return - 0 for success, or an - errno value for failure. Suggested - failure: EACCES for label mismatch, - or EPERM for lack of - privilege. - - - - <function>&mac.mpo;_check_rename_to_vnode</function> - - - - int - &mac.mpo;_check_rename_to_vnode - - struct ucred - *cred - struct vnode - *dvp - struct label - *dlabel - struct vnode - *vp - struct label - *label - int samedir - struct componentname - *cnp - - - - - - &mac.thead; - - - - cred - Subject credential - - - - dvp - Directory vnode - - - - dlabel - Policy label for dvp - - - - vp - Object; vnode - - - - label - Policy label for - vp - - - - cnp - Pathname - - - - - - Determine whether the subject credential can rename to - the passed vnode (vp) and the passed - directory (dvp) with the passed name - (cnp). This call will be made in - combination with an earlier call to - mpo_check_rename_from_vnode. - Return 0 for success, or an - errno value for failure. Suggested - failure: EACCES for label mismatch, - or EPERM for lack of - privilege. - - <function>&mac.mpo;_check_vnode_revoke</function> @@ -7228,37 +6733,6 @@ user credential. - - <function>&mac.mpo;_init_temp_label</function> - - - - void - &mac.mpo;_init_temp_label - - struct label - *label - - - - - - &mac.thead; - - - - label - Temporary label - - - - - - Initialize a newly instantiated temporary label; - temporary labels are frequently used to hold label update - requests. - - <function>&mac.mpo;_init_vnode_label</function> @@ -7294,41 +6768,7 @@ Initialize the label on a newly instantiated vnode. - - - <function>&mac.mpo;_destroy_bpfdesc</function> - - - - void - &mac.mpo;_destroy_bpfdesc_label - - struct bpf_d - *bpf_d - struct label - *label - - - - - - &mac.thead; - - - label - Label being destroyed - - - - - - Destroy the label on a BPF descriptor. In this entry - point, a policy module should free any internal storage - associated with label so that it may - be destroyed. - - <function>&mac.mpo;_destroy_devfsdirent_label</function> @@ -7630,38 +7070,6 @@ destroyed. - - <function>&mac.mpo;_destroy_temp_label</function> - - - - void - &mac.mpo;_destroy_temp_label - - struct label - *label - - - - - - &mac.thead; - - - - label - Temporary label being destroyed - - - - - - Destroy a temporary label. In this entry point, a - policy module should free any internal storage associated - with the temporary label label so - that it may be destroyed. - - <function>&mac.mpo;_destroy_vnode_label</function> To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe p4-projects" in the body of the message