xref: /xnu-10002.81.5/security/mac_iokit.c (revision 5e3eaea39dcf651e66cb99ba7d70e32cc4a99587)
1*5e3eaea3SApple OSS Distributions /*
2*5e3eaea3SApple OSS Distributions  * Copyright (c) 2007 Apple Inc. All rights reserved.
3*5e3eaea3SApple OSS Distributions  *
4*5e3eaea3SApple OSS Distributions  * @APPLE_OSREFERENCE_LICENSE_HEADER_START@
5*5e3eaea3SApple OSS Distributions  *
6*5e3eaea3SApple OSS Distributions  * This file contains Original Code and/or Modifications of Original Code
7*5e3eaea3SApple OSS Distributions  * as defined in and that are subject to the Apple Public Source License
8*5e3eaea3SApple OSS Distributions  * Version 2.0 (the 'License'). You may not use this file except in
9*5e3eaea3SApple OSS Distributions  * compliance with the License. The rights granted to you under the License
10*5e3eaea3SApple OSS Distributions  * may not be used to create, or enable the creation or redistribution of,
11*5e3eaea3SApple OSS Distributions  * unlawful or unlicensed copies of an Apple operating system, or to
12*5e3eaea3SApple OSS Distributions  * circumvent, violate, or enable the circumvention or violation of, any
13*5e3eaea3SApple OSS Distributions  * terms of an Apple operating system software license agreement.
14*5e3eaea3SApple OSS Distributions  *
15*5e3eaea3SApple OSS Distributions  * Please obtain a copy of the License at
16*5e3eaea3SApple OSS Distributions  * http://www.opensource.apple.com/apsl/ and read it before using this file.
17*5e3eaea3SApple OSS Distributions  *
18*5e3eaea3SApple OSS Distributions  * The Original Code and all software distributed under the License are
19*5e3eaea3SApple OSS Distributions  * distributed on an 'AS IS' basis, WITHOUT WARRANTY OF ANY KIND, EITHER
20*5e3eaea3SApple OSS Distributions  * EXPRESS OR IMPLIED, AND APPLE HEREBY DISCLAIMS ALL SUCH WARRANTIES,
21*5e3eaea3SApple OSS Distributions  * INCLUDING WITHOUT LIMITATION, ANY WARRANTIES OF MERCHANTABILITY,
22*5e3eaea3SApple OSS Distributions  * FITNESS FOR A PARTICULAR PURPOSE, QUIET ENJOYMENT OR NON-INFRINGEMENT.
23*5e3eaea3SApple OSS Distributions  * Please see the License for the specific language governing rights and
24*5e3eaea3SApple OSS Distributions  * limitations under the License.
25*5e3eaea3SApple OSS Distributions  *
26*5e3eaea3SApple OSS Distributions  * @APPLE_OSREFERENCE_LICENSE_HEADER_END@
27*5e3eaea3SApple OSS Distributions  */
28*5e3eaea3SApple OSS Distributions /*-
29*5e3eaea3SApple OSS Distributions  * Copyright (c) 2006 SPARTA, Inc.
30*5e3eaea3SApple OSS Distributions  * All rights reserved.
31*5e3eaea3SApple OSS Distributions  *
32*5e3eaea3SApple OSS Distributions  * Redistribution and use in source and binary forms, with or without
33*5e3eaea3SApple OSS Distributions  * modification, are permitted provided that the following conditions
34*5e3eaea3SApple OSS Distributions  * are met:
35*5e3eaea3SApple OSS Distributions  * 1. Redistributions of source code must retain the above copyright
36*5e3eaea3SApple OSS Distributions  *    notice, this list of conditions and the following disclaimer.
37*5e3eaea3SApple OSS Distributions  * 2. Redistributions in binary form must reproduce the above copyright
38*5e3eaea3SApple OSS Distributions  *    notice, this list of conditions and the following disclaimer in the
39*5e3eaea3SApple OSS Distributions  *    documentation and/or other materials provided with the distribution.
40*5e3eaea3SApple OSS Distributions  *
41*5e3eaea3SApple OSS Distributions  * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND
42*5e3eaea3SApple OSS Distributions  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
43*5e3eaea3SApple OSS Distributions  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
44*5e3eaea3SApple OSS Distributions  * ARE DISCLAIMED.  IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
45*5e3eaea3SApple OSS Distributions  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
46*5e3eaea3SApple OSS Distributions  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
47*5e3eaea3SApple OSS Distributions  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
48*5e3eaea3SApple OSS Distributions  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
49*5e3eaea3SApple OSS Distributions  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
50*5e3eaea3SApple OSS Distributions  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
51*5e3eaea3SApple OSS Distributions  * SUCH DAMAGE.
52*5e3eaea3SApple OSS Distributions  */
53*5e3eaea3SApple OSS Distributions 
54*5e3eaea3SApple OSS Distributions #include <sys/param.h>
55*5e3eaea3SApple OSS Distributions #include <sys/types.h>
56*5e3eaea3SApple OSS Distributions #include <sys/vnode.h>
57*5e3eaea3SApple OSS Distributions #include <sys/vnode_internal.h>
58*5e3eaea3SApple OSS Distributions #include <sys/queue.h>
59*5e3eaea3SApple OSS Distributions #include <bsd/bsm/audit.h>
60*5e3eaea3SApple OSS Distributions #include <bsd/security/audit/audit.h>
61*5e3eaea3SApple OSS Distributions #include <bsd/sys/malloc.h>
62*5e3eaea3SApple OSS Distributions #include <vm/vm_kern.h>
63*5e3eaea3SApple OSS Distributions 
64*5e3eaea3SApple OSS Distributions #include <security/mac_framework.h>
65*5e3eaea3SApple OSS Distributions #include <security/mac_internal.h>
66*5e3eaea3SApple OSS Distributions 
67*5e3eaea3SApple OSS Distributions int
mac_iokit_check_open_service(kauth_cred_t cred,io_object_t service,unsigned int user_client_type)68*5e3eaea3SApple OSS Distributions mac_iokit_check_open_service(kauth_cred_t cred, io_object_t service, unsigned int user_client_type)
69*5e3eaea3SApple OSS Distributions {
70*5e3eaea3SApple OSS Distributions 	int error;
71*5e3eaea3SApple OSS Distributions 
72*5e3eaea3SApple OSS Distributions 	MAC_CHECK(iokit_check_open_service, cred, service, user_client_type);
73*5e3eaea3SApple OSS Distributions 	return error;
74*5e3eaea3SApple OSS Distributions }
75*5e3eaea3SApple OSS Distributions 
76*5e3eaea3SApple OSS Distributions int
mac_iokit_check_open(kauth_cred_t cred,io_object_t user_client,unsigned int user_client_type)77*5e3eaea3SApple OSS Distributions mac_iokit_check_open(kauth_cred_t cred, io_object_t user_client, unsigned int user_client_type)
78*5e3eaea3SApple OSS Distributions {
79*5e3eaea3SApple OSS Distributions 	int error;
80*5e3eaea3SApple OSS Distributions 
81*5e3eaea3SApple OSS Distributions 	MAC_CHECK(iokit_check_open, cred, user_client, user_client_type);
82*5e3eaea3SApple OSS Distributions 	return error;
83*5e3eaea3SApple OSS Distributions }
84*5e3eaea3SApple OSS Distributions 
85*5e3eaea3SApple OSS Distributions int
mac_iokit_check_set_properties(kauth_cred_t cred,io_object_t registry_entry,io_object_t properties)86*5e3eaea3SApple OSS Distributions mac_iokit_check_set_properties(kauth_cred_t cred, io_object_t registry_entry, io_object_t properties)
87*5e3eaea3SApple OSS Distributions {
88*5e3eaea3SApple OSS Distributions 	int error;
89*5e3eaea3SApple OSS Distributions 
90*5e3eaea3SApple OSS Distributions 	MAC_CHECK(iokit_check_set_properties, cred, registry_entry, properties);
91*5e3eaea3SApple OSS Distributions 	return error;
92*5e3eaea3SApple OSS Distributions }
93*5e3eaea3SApple OSS Distributions 
94*5e3eaea3SApple OSS Distributions int
mac_iokit_check_filter_properties(kauth_cred_t cred,io_object_t registry_entry)95*5e3eaea3SApple OSS Distributions mac_iokit_check_filter_properties(kauth_cred_t cred, io_object_t registry_entry)
96*5e3eaea3SApple OSS Distributions {
97*5e3eaea3SApple OSS Distributions 	int error;
98*5e3eaea3SApple OSS Distributions 
99*5e3eaea3SApple OSS Distributions 	MAC_CHECK(iokit_check_filter_properties, cred, registry_entry);
100*5e3eaea3SApple OSS Distributions 	return error;
101*5e3eaea3SApple OSS Distributions }
102*5e3eaea3SApple OSS Distributions 
103*5e3eaea3SApple OSS Distributions int
mac_iokit_check_get_property(kauth_cred_t cred,io_object_t registry_entry,const char * name)104*5e3eaea3SApple OSS Distributions mac_iokit_check_get_property(kauth_cred_t cred, io_object_t registry_entry, const char *name)
105*5e3eaea3SApple OSS Distributions {
106*5e3eaea3SApple OSS Distributions 	int error;
107*5e3eaea3SApple OSS Distributions 
108*5e3eaea3SApple OSS Distributions 	MAC_CHECK(iokit_check_get_property, cred, registry_entry, name);
109*5e3eaea3SApple OSS Distributions 	return error;
110*5e3eaea3SApple OSS Distributions }
111*5e3eaea3SApple OSS Distributions 
112*5e3eaea3SApple OSS Distributions int
mac_iokit_check_hid_control(kauth_cred_t cred)113*5e3eaea3SApple OSS Distributions mac_iokit_check_hid_control(kauth_cred_t cred)
114*5e3eaea3SApple OSS Distributions {
115*5e3eaea3SApple OSS Distributions 	int error;
116*5e3eaea3SApple OSS Distributions 
117*5e3eaea3SApple OSS Distributions 	MAC_CHECK(iokit_check_hid_control, cred);
118*5e3eaea3SApple OSS Distributions 	return error;
119*5e3eaea3SApple OSS Distributions }
120