aboutsummaryrefslogtreecommitdiff
path: root/sys/netgraph/bluetooth/socket
diff options
context:
space:
mode:
authorRobert Watson <rwatson@FreeBSD.org>2003-11-18 00:39:07 +0000
committerRobert Watson <rwatson@FreeBSD.org>2003-11-18 00:39:07 +0000
commita557af222b70694470f63e2a0f1bf58c9dcc73fd (patch)
tree9ae16c9f3cb9780bbad2d9f596380ed1094d201c /sys/netgraph/bluetooth/socket
parentb17f40bbda6fee5e88662d68a7d8d372929f4986 (diff)
downloadsrc-a557af222b70694470f63e2a0f1bf58c9dcc73fd.tar.gz
src-a557af222b70694470f63e2a0f1bf58c9dcc73fd.zip
Introduce a MAC label reference in 'struct inpcb', which caches
the MAC label referenced from 'struct socket' in the IPv4 and IPv6-based protocols. This permits MAC labels to be checked during network delivery operations without dereferencing inp->inp_socket to get to so->so_label, which will eventually avoid our having to grab the socket lock during delivery at the network layer. This change introduces 'struct inpcb' as a labeled object to the MAC Framework, along with the normal circus of entry points: initialization, creation from socket, destruction, as well as a delivery access control check. For most policies, the inpcb label will simply be a cache of the socket label, so a new protocol switch method is introduced, pr_sosetlabel() to notify protocols that the socket layer label has been updated so that the cache can be updated while holding appropriate locks. Most protocols implement this using pru_sosetlabel_null(), but IPv4/IPv6 protocols using inpcbs use the the worker function in_pcbsosetlabel(), which calls into the MAC Framework to perform a cache update. Biba, LOMAC, and MLS implement these entry points, as do the stub policy, and test policy. Reviewed by: sam, bms Obtained from: TrustedBSD Project Sponsored by: DARPA, Network Associates Laboratories
Notes
Notes: svn path=/head/; revision=122875
Diffstat (limited to 'sys/netgraph/bluetooth/socket')
-rw-r--r--sys/netgraph/bluetooth/socket/ng_btsocket.c12
1 files changed, 8 insertions, 4 deletions
diff --git a/sys/netgraph/bluetooth/socket/ng_btsocket.c b/sys/netgraph/bluetooth/socket/ng_btsocket.c
index e8ad4adee3e9..383a06348267 100644
--- a/sys/netgraph/bluetooth/socket/ng_btsocket.c
+++ b/sys/netgraph/bluetooth/socket/ng_btsocket.c
@@ -79,7 +79,8 @@ static struct pr_usrreqs ng_btsocket_hci_raw_usrreqs = {
ng_btsocket_hci_raw_sockaddr, /* sockaddr */
sosend,
soreceive,
- sopoll
+ sopoll,
+ pru_sosetlabel_null
};
/*
@@ -106,7 +107,8 @@ static struct pr_usrreqs ng_btsocket_l2cap_raw_usrreqs = {
ng_btsocket_l2cap_raw_sockaddr, /* sockaddr */
sosend,
soreceive,
- sopoll
+ sopoll,
+ pru_sosetlabel_null
};
/*
@@ -133,7 +135,8 @@ static struct pr_usrreqs ng_btsocket_l2cap_usrreqs = {
ng_btsocket_l2cap_sockaddr, /* sockaddr */
sosend,
soreceive,
- sopoll
+ sopoll,
+ pru_sosetlabel_null
};
/*
@@ -160,7 +163,8 @@ static struct pr_usrreqs ng_btsocket_rfcomm_usrreqs = {
ng_btsocket_rfcomm_sockaddr, /* sockaddr */
sosend,
soreceive,
- sopoll
+ sopoll,
+ pru_sosetlabel_null
};
/*