1*bbb1b6f9SApple OSS Distributions /*
2*bbb1b6f9SApple OSS Distributions * Copyright (c) 2017 Apple Inc. All rights reserved.
3*bbb1b6f9SApple OSS Distributions *
4*bbb1b6f9SApple OSS Distributions * @APPLE_OSREFERENCE_LICENSE_HEADER_START@
5*bbb1b6f9SApple OSS Distributions *
6*bbb1b6f9SApple OSS Distributions * This file contains Original Code and/or Modifications of Original Code
7*bbb1b6f9SApple OSS Distributions * as defined in and that are subject to the Apple Public Source License
8*bbb1b6f9SApple OSS Distributions * Version 2.0 (the 'License'). You may not use this file except in
9*bbb1b6f9SApple OSS Distributions * compliance with the License. The rights granted to you under the License
10*bbb1b6f9SApple OSS Distributions * may not be used to create, or enable the creation or redistribution of,
11*bbb1b6f9SApple OSS Distributions * unlawful or unlicensed copies of an Apple operating system, or to
12*bbb1b6f9SApple OSS Distributions * circumvent, violate, or enable the circumvention or violation of, any
13*bbb1b6f9SApple OSS Distributions * terms of an Apple operating system software license agreement.
14*bbb1b6f9SApple OSS Distributions *
15*bbb1b6f9SApple OSS Distributions * Please obtain a copy of the License at
16*bbb1b6f9SApple OSS Distributions * http://www.opensource.apple.com/apsl/ and read it before using this file.
17*bbb1b6f9SApple OSS Distributions *
18*bbb1b6f9SApple OSS Distributions * The Original Code and all software distributed under the License are
19*bbb1b6f9SApple OSS Distributions * distributed on an 'AS IS' basis, WITHOUT WARRANTY OF ANY KIND, EITHER
20*bbb1b6f9SApple OSS Distributions * EXPRESS OR IMPLIED, AND APPLE HEREBY DISCLAIMS ALL SUCH WARRANTIES,
21*bbb1b6f9SApple OSS Distributions * INCLUDING WITHOUT LIMITATION, ANY WARRANTIES OF MERCHANTABILITY,
22*bbb1b6f9SApple OSS Distributions * FITNESS FOR A PARTICULAR PURPOSE, QUIET ENJOYMENT OR NON-INFRINGEMENT.
23*bbb1b6f9SApple OSS Distributions * Please see the License for the specific language governing rights and
24*bbb1b6f9SApple OSS Distributions * limitations under the License.
25*bbb1b6f9SApple OSS Distributions *
26*bbb1b6f9SApple OSS Distributions * @APPLE_OSREFERENCE_LICENSE_HEADER_END@
27*bbb1b6f9SApple OSS Distributions */
28*bbb1b6f9SApple OSS Distributions
29*bbb1b6f9SApple OSS Distributions #include <sys/param.h>
30*bbb1b6f9SApple OSS Distributions #include <sys/proc.h>
31*bbb1b6f9SApple OSS Distributions #include <sys/kauth.h>
32*bbb1b6f9SApple OSS Distributions #include <security/mac_framework.h>
33*bbb1b6f9SApple OSS Distributions #include <security/mac_internal.h>
34*bbb1b6f9SApple OSS Distributions
35*bbb1b6f9SApple OSS Distributions int
mac_skywalk_flow_check_connect(proc_t proc,void * flow,const struct sockaddr * addr,int type,int protocol)36*bbb1b6f9SApple OSS Distributions mac_skywalk_flow_check_connect(proc_t proc, void *flow, const struct sockaddr *addr, int type, int protocol)
37*bbb1b6f9SApple OSS Distributions {
38*bbb1b6f9SApple OSS Distributions int error;
39*bbb1b6f9SApple OSS Distributions kauth_cred_t cred;
40*bbb1b6f9SApple OSS Distributions
41*bbb1b6f9SApple OSS Distributions cred = kauth_cred_proc_ref(proc);
42*bbb1b6f9SApple OSS Distributions MAC_CHECK(skywalk_flow_check_connect, cred, flow, addr, type, protocol);
43*bbb1b6f9SApple OSS Distributions kauth_cred_unref(&cred);
44*bbb1b6f9SApple OSS Distributions return error;
45*bbb1b6f9SApple OSS Distributions }
46*bbb1b6f9SApple OSS Distributions
47*bbb1b6f9SApple OSS Distributions int
mac_skywalk_flow_check_listen(proc_t proc,void * flow,const struct sockaddr * addr,int type,int protocol)48*bbb1b6f9SApple OSS Distributions mac_skywalk_flow_check_listen(proc_t proc, void *flow, const struct sockaddr *addr, int type, int protocol)
49*bbb1b6f9SApple OSS Distributions {
50*bbb1b6f9SApple OSS Distributions int error;
51*bbb1b6f9SApple OSS Distributions kauth_cred_t cred;
52*bbb1b6f9SApple OSS Distributions
53*bbb1b6f9SApple OSS Distributions cred = kauth_cred_proc_ref(proc);
54*bbb1b6f9SApple OSS Distributions MAC_CHECK(skywalk_flow_check_listen, cred, flow, addr, type, protocol);
55*bbb1b6f9SApple OSS Distributions kauth_cred_unref(&cred);
56*bbb1b6f9SApple OSS Distributions return error;
57*bbb1b6f9SApple OSS Distributions }
58