freebsd-skq/sys/netatm
Robert Watson a557af222b Introduce a MAC label reference in 'struct inpcb', which caches
the   MAC label referenced from 'struct socket' in the IPv4 and
IPv6-based protocols.  This permits MAC labels to be checked during
network delivery operations without dereferencing inp->inp_socket
to get to so->so_label, which will eventually avoid our having to
grab the socket lock during delivery at the network layer.

This change introduces 'struct inpcb' as a labeled object to the
MAC Framework, along with the normal circus of entry points:
initialization, creation from socket, destruction, as well as a
delivery access control check.

For most policies, the inpcb label will simply be a cache of the
socket label, so a new protocol switch method is introduced,
pr_sosetlabel() to notify protocols that the socket layer label
has been updated so that the cache can be updated while holding
appropriate locks.  Most protocols implement this using
pru_sosetlabel_null(), but IPv4/IPv6 protocols using inpcbs use
the the worker function in_pcbsosetlabel(), which calls into the
MAC Framework to perform a cache update.

Biba, LOMAC, and MLS implement these entry points, as do the stub
policy, and test policy.

Reviewed by:	sam, bms
Obtained from:	TrustedBSD Project
Sponsored by:	DARPA, Network Associates Laboratories
2003-11-18 00:39:07 +00:00
..
ipatm Include <sys/malloc.h> for the declaration of malloc(), etc. instead 2003-11-14 21:02:10 +00:00
sigpvc Make the ioctl() interface cleaner with regard to types: use size_t 2003-07-29 13:32:10 +00:00
spans Replace the if_name and if_unit members of struct ifnet with new members 2003-10-31 18:32:15 +00:00
uni Replace the if_name and if_unit members of struct ifnet with new members 2003-10-31 18:32:15 +00:00
atm_aal5.c Introduce a MAC label reference in 'struct inpcb', which caches 2003-11-18 00:39:07 +00:00
atm_cm.c Silence a gcc-warning. Do this by inlining the macro-call. This is 2003-07-26 14:20:37 +00:00
atm_cm.h
atm_device.c Hand the packet to bpf not only in the LLC/SNAP case, but for all 2003-07-25 06:43:41 +00:00
atm_if.c Replace the if_name and if_unit members of struct ifnet with new members 2003-10-31 18:32:15 +00:00
atm_if.h Replace the if_name and if_unit members of struct ifnet with new members 2003-10-31 18:32:15 +00:00
atm_ioctl.h Make the ioctl() interface cleaner with regard to types: use size_t 2003-07-29 13:32:10 +00:00
atm_pcb.h
atm_proto.c Create a subtree 'harp' of the net sysctl tree. This uses a fixed 2003-07-24 10:33:01 +00:00
atm_sap.h
atm_sigmgr.h
atm_signal.c
atm_socket.c Replace the if_name and if_unit members of struct ifnet with new members 2003-10-31 18:32:15 +00:00
atm_stack.h
atm_subr.c o add a flags parameter to netisr_register that is used to specify 2003-11-08 22:28:40 +00:00
atm_sys.h
atm_usrreq.c Introduce a MAC label reference in 'struct inpcb', which caches 2003-11-18 00:39:07 +00:00
atm_var.h Replace the if_name and if_unit members of struct ifnet with new members 2003-10-31 18:32:15 +00:00
atm_vc.h Make the ioctl() interface cleaner with regard to types: use size_t 2003-07-29 13:32:10 +00:00
atm.h
port.h
queue.h