d/freebsd-dev
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Give each posixsem MAC Framework entry point its own counter and test case

Browse Source 
in the mac_test policy, rather than sharing a single function for all of
the access control checks.

Obtained from:	TrustedBSD Project
This commit is contained in:
Robert Watson 2007-10-27 10:38:57 +00:00
parent eb75c0a0d0
commit 438aeadf27
Notes: svn2git 2020-12-20 02:59:44 +00:00 
svn path=/head/; revision=173054
1 changed files with 74 additions and 9 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

83
sys/security/mac_test/mac_test.c
View File

@ -1612,15 +1612,80 @@ test_pipe_check_write(struct ucred *cred, struct pipepair *pp,
return (0);
}
COUNTER_DECL(posixsem_check);
COUNTER_DECL(posixsem_check_destroy);
static int
test_posixsem_check(struct ucred *cred, struct ksem *ks,
test_posixsem_check_destroy(struct ucred *cred, struct ksem *ks,
struct label *kslabel)
{
LABEL_CHECK(cred->cr_label, MAGIC_CRED);
LABEL_CHECK(kslabel, MAGIC_POSIX_SEM);
COUNTER_INC(posixsem_check);
COUNTER_INC(posixsem_check_destroy);
return (0);
}
COUNTER_DECL(posixsem_check_getvalue);
static int
test_posixsem_check_getvalue(struct ucred *cred, struct ksem *ks,
struct label *kslabel)
{
LABEL_CHECK(cred->cr_label, MAGIC_CRED);
LABEL_CHECK(kslabel, MAGIC_POSIX_SEM);
COUNTER_INC(posixsem_check_getvalue);
return (0);
}
COUNTER_DECL(posixsem_check_open);
static int
test_posixsem_check_open(struct ucred *cred, struct ksem *ks,
struct label *kslabel)
{
LABEL_CHECK(cred->cr_label, MAGIC_CRED);
LABEL_CHECK(kslabel, MAGIC_POSIX_SEM);
COUNTER_INC(posixsem_check_open);
return (0);
}
COUNTER_DECL(posixsem_check_post);
static int
test_posixsem_check_post(struct ucred *cred, struct ksem *ks,
struct label *kslabel)
{
LABEL_CHECK(cred->cr_label, MAGIC_CRED);
LABEL_CHECK(kslabel, MAGIC_POSIX_SEM);
COUNTER_INC(posixsem_check_post);
return (0);
}
COUNTER_DECL(posixsem_check_unlink);
static int
test_posixsem_check_unlink(struct ucred *cred, struct ksem *ks,
struct label *kslabel)
{
LABEL_CHECK(cred->cr_label, MAGIC_CRED);
LABEL_CHECK(kslabel, MAGIC_POSIX_SEM);
COUNTER_INC(posixsem_check_unlink);
return (0);
}
COUNTER_DECL(posixsem_check_wait);
static int
test_posixsem_check_wait(struct ucred *cred, struct ksem *ks,
struct label *kslabel)
{
LABEL_CHECK(cred->cr_label, MAGIC_CRED);
LABEL_CHECK(kslabel, MAGIC_POSIX_SEM);
COUNTER_INC(posixsem_check_wait);
return (0);
}
@ -2616,12 +2681,12 @@ static struct mac_policy_ops test_ops =
.mpo_pipe_check_relabel = test_pipe_check_relabel,
.mpo_pipe_check_stat = test_pipe_check_stat,
.mpo_pipe_check_write = test_pipe_check_write,
.mpo_posixsem_check_destroy = test_posixsem_check,
.mpo_posixsem_check_getvalue = test_posixsem_check,
.mpo_posixsem_check_open = test_posixsem_check,
.mpo_posixsem_check_post = test_posixsem_check,
.mpo_posixsem_check_unlink = test_posixsem_check,
.mpo_posixsem_check_wait = test_posixsem_check,
.mpo_posixsem_check_destroy = test_posixsem_check_destroy,
.mpo_posixsem_check_getvalue = test_posixsem_check_getvalue,
.mpo_posixsem_check_open = test_posixsem_check_open,
.mpo_posixsem_check_post = test_posixsem_check_post,
.mpo_posixsem_check_unlink = test_posixsem_check_unlink,
.mpo_posixsem_check_wait = test_posixsem_check_wait,
.mpo_proc_check_debug = test_proc_check_debug,
.mpo_proc_check_sched = test_proc_check_sched,
.mpo_proc_check_setaudit = test_proc_check_setaudit,