xref: /xnu-8792.41.9/security/mac_skywalk.c (revision 5c2921b07a2480ab43ec66f5b9e41cb872bc554f)
1*5c2921b0SApple OSS Distributions /*
2*5c2921b0SApple OSS Distributions  * Copyright (c) 2017 Apple Inc. All rights reserved.
3*5c2921b0SApple OSS Distributions  *
4*5c2921b0SApple OSS Distributions  * @APPLE_OSREFERENCE_LICENSE_HEADER_START@
5*5c2921b0SApple OSS Distributions  *
6*5c2921b0SApple OSS Distributions  * This file contains Original Code and/or Modifications of Original Code
7*5c2921b0SApple OSS Distributions  * as defined in and that are subject to the Apple Public Source License
8*5c2921b0SApple OSS Distributions  * Version 2.0 (the 'License'). You may not use this file except in
9*5c2921b0SApple OSS Distributions  * compliance with the License. The rights granted to you under the License
10*5c2921b0SApple OSS Distributions  * may not be used to create, or enable the creation or redistribution of,
11*5c2921b0SApple OSS Distributions  * unlawful or unlicensed copies of an Apple operating system, or to
12*5c2921b0SApple OSS Distributions  * circumvent, violate, or enable the circumvention or violation of, any
13*5c2921b0SApple OSS Distributions  * terms of an Apple operating system software license agreement.
14*5c2921b0SApple OSS Distributions  *
15*5c2921b0SApple OSS Distributions  * Please obtain a copy of the License at
16*5c2921b0SApple OSS Distributions  * http://www.opensource.apple.com/apsl/ and read it before using this file.
17*5c2921b0SApple OSS Distributions  *
18*5c2921b0SApple OSS Distributions  * The Original Code and all software distributed under the License are
19*5c2921b0SApple OSS Distributions  * distributed on an 'AS IS' basis, WITHOUT WARRANTY OF ANY KIND, EITHER
20*5c2921b0SApple OSS Distributions  * EXPRESS OR IMPLIED, AND APPLE HEREBY DISCLAIMS ALL SUCH WARRANTIES,
21*5c2921b0SApple OSS Distributions  * INCLUDING WITHOUT LIMITATION, ANY WARRANTIES OF MERCHANTABILITY,
22*5c2921b0SApple OSS Distributions  * FITNESS FOR A PARTICULAR PURPOSE, QUIET ENJOYMENT OR NON-INFRINGEMENT.
23*5c2921b0SApple OSS Distributions  * Please see the License for the specific language governing rights and
24*5c2921b0SApple OSS Distributions  * limitations under the License.
25*5c2921b0SApple OSS Distributions  *
26*5c2921b0SApple OSS Distributions  * @APPLE_OSREFERENCE_LICENSE_HEADER_END@
27*5c2921b0SApple OSS Distributions  */
28*5c2921b0SApple OSS Distributions 
29*5c2921b0SApple OSS Distributions #include <sys/param.h>
30*5c2921b0SApple OSS Distributions #include <sys/proc.h>
31*5c2921b0SApple OSS Distributions #include <sys/kauth.h>
32*5c2921b0SApple OSS Distributions #include <security/mac_framework.h>
33*5c2921b0SApple OSS Distributions #include <security/mac_internal.h>
34*5c2921b0SApple OSS Distributions 
35*5c2921b0SApple OSS Distributions int
mac_skywalk_flow_check_connect(__unused proc_t proc,void * flow,const struct sockaddr * addr,int type,int protocol)36*5c2921b0SApple OSS Distributions mac_skywalk_flow_check_connect(__unused proc_t proc, void *flow, const struct sockaddr *addr, int type, int protocol)
37*5c2921b0SApple OSS Distributions {
38*5c2921b0SApple OSS Distributions 	int error;
39*5c2921b0SApple OSS Distributions 
40*5c2921b0SApple OSS Distributions 	assert(proc == current_proc());
41*5c2921b0SApple OSS Distributions 	MAC_CHECK(skywalk_flow_check_connect, kauth_cred_get(), flow, addr, type, protocol);
42*5c2921b0SApple OSS Distributions 	return error;
43*5c2921b0SApple OSS Distributions }
44*5c2921b0SApple OSS Distributions 
45*5c2921b0SApple OSS Distributions int
mac_skywalk_flow_check_listen(__unused proc_t proc,void * flow,const struct sockaddr * addr,int type,int protocol)46*5c2921b0SApple OSS Distributions mac_skywalk_flow_check_listen(__unused proc_t proc, void *flow, const struct sockaddr *addr, int type, int protocol)
47*5c2921b0SApple OSS Distributions {
48*5c2921b0SApple OSS Distributions 	int error;
49*5c2921b0SApple OSS Distributions 
50*5c2921b0SApple OSS Distributions 	assert(proc == current_proc());
51*5c2921b0SApple OSS Distributions 	MAC_CHECK(skywalk_flow_check_listen, kauth_cred_get(), flow, addr, type, protocol);
52*5c2921b0SApple OSS Distributions 	return error;
53*5c2921b0SApple OSS Distributions }
54