310e7ceb94
SOCK_LOCK(so): - Hold socket lock over calls to MAC entry points reading or manipulating socket labels. - Assert socket lock in MAC entry point implementations. - When externalizing the socket label, first make a thread-local copy while holding the socket lock, then release the socket lock to externalize to userspace. |
||
---|---|---|
.. | ||
mac_framework.c | ||
mac_framework.h | ||
mac_inet.c | ||
mac_internal.h | ||
mac_label.c | ||
mac_net.c | ||
mac_pipe.c | ||
mac_policy.h | ||
mac_process.c | ||
mac_socket.c | ||
mac_syscalls.c | ||
mac_system.c | ||
mac_vfs.c |