99 static int	mls_label_size = sizeof(struct mac_mls);
124 #define	SLOT(l)	((struct mac_mls *)mac_label_get((l), mls_slot))
139 static struct mac_mls *
147 mls_free(struct mac_mls *mm)  in mls_free()
157 mls_atmostflags(struct mac_mls *mm, int flags)  in mls_atmostflags()
218 mls_range_in_range(struct mac_mls *rangea, struct mac_mls *rangeb)  in mls_range_in_range()
228 mls_effective_in_range(struct mac_mls *effective, struct mac_mls *range)  in mls_effective_in_range()
245 mls_dominate_effective(struct mac_mls *a, struct mac_mls *b)  in mls_dominate_effective()
267 mls_equal_effective(struct mac_mls *a, struct mac_mls *b)  in mls_equal_effective()
279 mls_contains_equal(struct mac_mls *mm)  in mls_contains_equal()
297 mls_subject_privileged(struct mac_mls *mm)  in mls_subject_privileged()
322 mls_valid(struct mac_mls *mm)  in mls_valid()
394 mls_set_range(struct mac_mls *mm, u_short typelow, u_short levellow,  in mls_set_range()
413 mls_set_effective(struct mac_mls *mm, u_short type, u_short level,  in mls_set_effective()
426 mls_copy_range(struct mac_mls *labelfrom, struct mac_mls *labelto)  in mls_copy_range()
438 mls_copy_effective(struct mac_mls *labelfrom, struct mac_mls *labelto)  in mls_copy_effective()
449 mls_copy(struct mac_mls *source, struct mac_mls *dest)  in mls_copy()
465 	zone_mls = uma_zcreate("mac_mls", sizeof(struct mac_mls), NULL,  in mls_init()
553 mls_to_string(struct sbuf *sb, struct mac_mls *mm)  in mls_to_string()
585 	struct mac_mls *mm;  in mls_externalize_label()
654 mls_parse(struct mac_mls *mm, char *string)  in mls_parse()
710 	struct mac_mls *mm, mm_temp;  in mls_internalize_label()
743 	struct mac_mls *a, *b;  in mls_bpfdesc_check_receive()
759 	struct mac_mls *source, *dest;  in mls_bpfdesc_create()
771 	struct mac_mls *source, *dest;  in mls_bpfdesc_create_mbuf()
782 	struct mac_mls *label;  in mls_cred_associate_nfsd()
793 	struct mac_mls *subj, *new;  in mls_cred_check_relabel()
853 	struct mac_mls *subj, *obj;  in mls_cred_check_visible()
871 	struct mac_mls *dest;  in mls_cred_create_init()
883 	struct mac_mls *dest;  in mls_cred_create_swapper()
895 	struct mac_mls *source, *dest;  in mls_cred_relabel()
907 	struct mac_mls *mm;  in mls_devfs_create_device()
935 	struct mac_mls *mm;  in mls_devfs_create_directory()
946 	struct mac_mls *source, *dest;  in mls_devfs_create_symlink()
958 	struct mac_mls *source, *dest;  in mls_devfs_update()
971 	struct mac_mls *source, *dest;  in mls_devfs_vnode_associate()
983 	struct mac_mls *subj, *new;  in mls_ifnet_check_relabel()
1007 	struct mac_mls *p, *i;  in mls_ifnet_check_transmit()
1021 	struct mac_mls *dest;  in mls_ifnet_create()
1039 	struct mac_mls *source, *dest;  in mls_ifnet_create_mbuf()
1051 	struct mac_mls *source, *dest;  in mls_ifnet_relabel()
1063 	struct mac_mls *p, *i;  in mls_inpcb_check_deliver()
1078 	struct mac_mls *subj, *obj;  in mls_inpcb_check_visible()
1096 	struct mac_mls *source, *dest;  in mls_inpcb_create()
1108 	struct mac_mls *source, *dest;  in mls_inpcb_create_mbuf()
1120 	struct mac_mls *source, *dest;  in mls_inpcb_sosetlabel()
1134 	struct mac_mls *source, *dest;  in mls_ip6q_create()
1146 	struct mac_mls *a, *b;  in mls_ip6q_match()
1158 	struct mac_mls *source, *dest;  in mls_ip6q_reassemble()
1179 	struct mac_mls *source, *dest;  in mls_ipq_create()
1191 	struct mac_mls *a, *b;  in mls_ipq_match()
1203 	struct mac_mls *source, *dest;  in mls_ipq_reassemble()
1224 	struct mac_mls *subj, *obj;  in mls_mount_check_stat()
1241 	struct mac_mls *source, *dest;  in mls_mount_create()
1253 	struct mac_mls *dest;  in mls_netinet_arp_send()
1264 	struct mac_mls *source, *dest;  in mls_netinet_firewall_reply()
1275 	struct mac_mls *dest;  in mls_netinet_firewall_send()
1287 	struct mac_mls *source, *dest;  in mls_netinet_fragment()
1299 	struct mac_mls *source, *dest;  in mls_netinet_icmp_reply()
1311 	struct mac_mls *dest;  in mls_netinet_igmp_send()
1322 	struct mac_mls *dest;  in mls_netinet6_nd6_send()
1346 	struct mac_mls *subj, *obj;  in mls_pipe_check_poll()
1364 	struct mac_mls *subj, *obj;  in mls_pipe_check_read()
1382 	struct mac_mls *subj, *obj, *new;  in mls_pipe_check_relabel()
1433 	struct mac_mls *subj, *obj;  in mls_pipe_check_stat()
1451 	struct mac_mls *subj, *obj;  in mls_pipe_check_write()
1469 	struct mac_mls *source, *dest;  in mls_pipe_create()
1481 	struct mac_mls *source, *dest;  in mls_pipe_relabel()
1493 	struct mac_mls *subj, *obj;  in mls_posixsem_check_openunlink()
1511 	struct mac_mls *subj, *obj;  in mls_posixsem_check_rdonly()
1529 	struct mac_mls *subj, *obj;  in mls_posixsem_check_setmode()
1547 	struct mac_mls *subj, *obj;  in mls_posixsem_check_setowner()
1565 	struct mac_mls *subj, *obj;  in mls_posixsem_check_write()
1583 	struct mac_mls *source, *dest;  in mls_posixsem_create()
1595 	struct mac_mls *subj, *obj;  in mls_posixshm_check_mmap()
1619 	struct mac_mls *subj, *obj;  in mls_posixshm_check_open()
1643 	struct mac_mls *subj, *obj;  in mls_posixshm_check_read()
1661 	struct mac_mls *subj, *obj;  in mls_posixshm_check_setmode()
1679 	struct mac_mls *subj, *obj;  in mls_posixshm_check_setowner()
1697 	struct mac_mls *subj, *obj;  in mls_posixshm_check_stat()
1715 	struct mac_mls *subj, *obj;  in mls_posixshm_check_truncate()
1733 	struct mac_mls *subj, *obj;  in mls_posixshm_check_unlink()
1751 	struct mac_mls *subj, *obj;  in mls_posixshm_check_write()
1769 	struct mac_mls *source, *dest;  in mls_posixshm_create()
1780 	struct mac_mls *subj, *obj;  in mls_proc_check_debug()
1800 	struct mac_mls *subj, *obj;  in mls_proc_check_sched()
1820 	struct mac_mls *subj, *obj;  in mls_proc_check_signal()
1841 	struct mac_mls *p, *s;  in mls_socket_check_deliver()
1861 	struct mac_mls *subj, *obj, *new;  in mls_socket_check_relabel()
1914 	struct mac_mls *subj, *obj;  in mls_socket_check_visible()
1936 	struct mac_mls *source, *dest;  in mls_socket_create()
1948 	struct mac_mls *source, *dest;  in mls_socket_create_mbuf()
1962 	struct mac_mls source, *dest;  in mls_socket_newconn()
1979 	struct mac_mls *source, *dest;  in mls_socket_relabel()
1993 	struct mac_mls *source, *dest;  in mls_socketpeer_set_from_mbuf()
2008 	struct mac_mls source, *dest;  in mls_socketpeer_set_from_socket()
2024 	struct mac_mls *source, *dest;  in mls_syncache_create()
2036 	struct mac_mls *source, *dest;  in mls_syncache_create_mbuf()
2048 	struct mac_mls *subj, *obj;  in mls_system_check_acct()
2070 	struct mac_mls *subj, *obj;  in mls_system_check_auditctl()
2089 	struct mac_mls *subj, *obj;  in mls_system_check_swapon()
2108 	bzero(SLOT(msglabel), sizeof(struct mac_mls));  in mls_sysvmsg_cleanup()
2115 	struct mac_mls *source, *dest;  in mls_sysvmsg_create()
2128 	struct mac_mls *subj, *obj;  in mls_sysvmsq_check_msgrcv()
2146 	struct mac_mls *subj, *obj;  in mls_sysvmsq_check_msgrmid()
2164 	struct mac_mls *subj, *obj;  in mls_sysvmsq_check_msqget()
2182 	struct mac_mls *subj, *obj;  in mls_sysvmsq_check_msqsnd()
2200 	struct mac_mls *subj, *obj;  in mls_sysvmsq_check_msqrcv()
2218 	struct mac_mls *subj, *obj;  in mls_sysvmsq_check_msqctl()
2249 	bzero(SLOT(msqlabel), sizeof(struct mac_mls));  in mls_sysvmsq_cleanup()
2256 	struct mac_mls *source, *dest;  in mls_sysvmsq_create()
2268 	struct mac_mls *subj, *obj;  in mls_sysvsem_check_semctl()
2306 	struct mac_mls *subj, *obj;  in mls_sysvsem_check_semget()
2324 	struct mac_mls *subj, *obj;  in mls_sysvsem_check_semop()
2347 	bzero(SLOT(semalabel), sizeof(struct mac_mls));  in mls_sysvsem_cleanup()
2354 	struct mac_mls *source, *dest;  in mls_sysvsem_create()
2366 	struct mac_mls *subj, *obj;  in mls_sysvshm_check_shmat()
2388 	struct mac_mls *subj, *obj;  in mls_sysvshm_check_shmctl()
2420 	struct mac_mls *subj, *obj;  in mls_sysvshm_check_shmget()
2438 	bzero(SLOT(shmlabel), sizeof(struct mac_mls));  in mls_sysvshm_cleanup()
2445 	struct mac_mls *source, *dest;  in mls_sysvshm_create()
2457 	struct mac_mls mm_temp, *source, *dest;  in mls_vnode_associate_extattr()
2497 	struct mac_mls *source, *dest;  in mls_vnode_associate_singlelabel()
2509 	struct mac_mls *subj, *obj;  in mls_vnode_check_chdir()
2527 	struct mac_mls *subj, *obj;  in mls_vnode_check_chroot()
2545 	struct mac_mls *subj, *obj;  in mls_vnode_check_create()
2563 	struct mac_mls *subj, *obj;  in mls_vnode_check_deleteacl()
2581 	struct mac_mls *subj, *obj;  in mls_vnode_check_deleteextattr()
2600 	struct mac_mls *subj, *obj, *exec;  in mls_vnode_check_exec()
2631 	struct mac_mls *subj, *obj;  in mls_vnode_check_getacl()
2649 	struct mac_mls *subj, *obj;  in mls_vnode_check_getextattr()
2668 	struct mac_mls *subj, *obj;  in mls_vnode_check_link()
2691 	struct mac_mls *subj, *obj;  in mls_vnode_check_listextattr()
2709 	struct mac_mls *subj, *obj;  in mls_vnode_check_lookup()
2727 	struct mac_mls *subj, *obj;  in mls_vnode_check_mmap()
2755 	struct mac_mls *subj, *obj;  in mls_vnode_check_open()
2780 	struct mac_mls *subj, *obj;  in mls_vnode_check_poll()
2798 	struct mac_mls *subj, *obj;  in mls_vnode_check_read()
2816 	struct mac_mls *subj, *obj;  in mls_vnode_check_readdir()
2834 	struct mac_mls *subj, *obj;  in mls_vnode_check_readlink()
2852 	struct mac_mls *old, *new, *subj;  in mls_vnode_check_relabel()
2904 	struct mac_mls *subj, *obj;  in mls_vnode_check_rename_from()
2928 	struct mac_mls *subj, *obj;  in mls_vnode_check_rename_to()
2953 	struct mac_mls *subj, *obj;  in mls_vnode_check_revoke()
2971 	struct mac_mls *subj, *obj;  in mls_vnode_check_setacl()
2989 	struct mac_mls *subj, *obj;  in mls_vnode_check_setextattr()
3009 	struct mac_mls *subj, *obj;  in mls_vnode_check_setflags()
3027 	struct mac_mls *subj, *obj;  in mls_vnode_check_setmode()
3045 	struct mac_mls *subj, *obj;  in mls_vnode_check_setowner()
3063 	struct mac_mls *subj, *obj;  in mls_vnode_check_setutimes()
3081 	struct mac_mls *subj, *obj;  in mls_vnode_check_stat()
3100 	struct mac_mls *subj, *obj;  in mls_vnode_check_unlink()
3123 	struct mac_mls *subj, *obj;  in mls_vnode_check_write()
3142 	struct mac_mls *source, *dest, mm_temp;  in mls_vnode_create_extattr()
3164 	struct mac_mls *source, *dest;  in mls_vnode_relabel()
3176 	struct mac_mls *source, mm_temp;  in mls_vnode_setlabel_extattr()
3422 MAC_POLICY_SET(&mls_ops, mac_mls, "TrustedBSD MAC/MLS",