Robert Watson 920325ee1d Implement mac_get_peer(3) using getsockopt() with SOL_SOCKET and ... SO_PEERLABEL. This provides an interface to query the label of a socket peer without embedding implementation details of mac_t in the application. Previously, sizeof(*mac_t) had to be specified by an application when performing getsockopt(). Document mac_get_peer(3), and expand documentation of the other mac_get(3) functions. Note that it's possible to get EINVAL back from mac_get_fd(3) when pointing it at an inappropriate object. NOTE: mac_get_fd() and mac_set_fd() support for sockets will follow shortly, so the documentation is slightly ahead of the code. Obtained from: TrustedBSD Project Sponsored by: DARPA, Network Associates Laboratories		2003-11-16 20:18:24 +00:00
..
mac_framework.c	Mark __mac_get_pid() as MPSAFE in the comment, as it runs without	2003-11-12 22:19:15 +00:00
mac_framework.h	Implement mac_get_peer(3) using getsockopt() with SOL_SOCKET and	2003-11-16 20:18:24 +00:00
mac_internal.h	Abstract the label checking and setting logic from	2003-11-16 20:01:50 +00:00
mac_label.c	Modify the MAC Framework so that instead of embedding a (struct label)	2003-11-12 03:14:31 +00:00
mac_net.c	Abstract the label checking and setting logic from	2003-11-16 20:01:50 +00:00
mac_pipe.c	Modify the MAC Framework so that instead of embedding a (struct label)	2003-11-12 03:14:31 +00:00
mac_policy.h	Introduce two new MAC Framework and MAC policy entry points:	2003-08-21 18:21:22 +00:00
mac_process.c	Modify the MAC Framework so that instead of embedding a (struct label)	2003-11-12 03:14:31 +00:00
mac_syscalls.c	Mark __mac_get_pid() as MPSAFE in the comment, as it runs without	2003-11-12 22:19:15 +00:00
mac_system.c	Modify the MAC Framework so that instead of embedding a (struct label)	2003-11-12 03:14:31 +00:00
mac_vfs.c	Modify the MAC Framework so that instead of embedding a (struct label)	2003-11-12 03:14:31 +00:00