98 	int error;  in mac_label_copyin_string()  local
100 	error = mac_check_structmac_consistent(mac);  in mac_label_copyin_string()
101 	if (error != 0)  in mac_label_copyin_string()
102 		return (error);  in mac_label_copyin_string()
109 	error = copyinstr(mac->m_string, buffer, mac->m_buflen, NULL);  in mac_label_copyin_string()
110 	if (error != 0) {  in mac_label_copyin_string()
112 		return (error);  in mac_label_copyin_string()
115 	MPASS(error == 0);  in mac_label_copyin_string()
133 	int error;  in mac_label_copyin()  local
139 		error = copyin(u_mac, &mac32, sizeof(mac32));  in mac_label_copyin()
140 		if (error != 0)  in mac_label_copyin()
141 			return (error);  in mac_label_copyin()
148 		error = copyin(u_mac, mac, sizeof(*mac));  in mac_label_copyin()
149 		if (error != 0)  in mac_label_copyin()
150 			return (error);  in mac_label_copyin()
169 	int error;  in sys___mac_get_pid()  local
171 	error = mac_label_copyin(uap->mac_p, &mac, &u_buffer);  in sys___mac_get_pid()
172 	if (error)  in sys___mac_get_pid()
173 		return (error);  in sys___mac_get_pid()
177 		error = ESRCH;  in sys___mac_get_pid()
182 	error = p_cansee(td, tproc);  in sys___mac_get_pid()
183 	if (error == 0)  in sys___mac_get_pid()
186 	if (error)  in sys___mac_get_pid()
190 	error = mac_cred_externalize_label(tcred->cr_label, mac.m_string,  in sys___mac_get_pid()
192 	if (error == 0)  in sys___mac_get_pid()
193 		error = copyout(buffer, u_buffer, strlen(buffer)+1);  in sys___mac_get_pid()
199 	return (error);  in sys___mac_get_pid()
207 	int error;  in sys___mac_get_proc()  local
209 	error = mac_label_copyin(uap->mac_p, &mac, &u_buffer);  in sys___mac_get_proc()
210 	if (error)  in sys___mac_get_proc()
211 		return (error);  in sys___mac_get_proc()
214 	error = mac_cred_externalize_label(td->td_ucred->cr_label,  in sys___mac_get_proc()
216 	if (error == 0)  in sys___mac_get_proc()
217 		error = copyout(buffer, u_buffer, strlen(buffer)+1);  in sys___mac_get_proc()
221 	return (error);  in sys___mac_get_proc()
237 	int error;  in mac_set_proc_prepare()  local
245 	error = mac_cred_internalize_label(intlabel, mac->m_string);  in mac_set_proc_prepare()
246 	if (error) {  in mac_set_proc_prepare()
248 		return (error);  in mac_set_proc_prepare()
272 	int error;  in mac_set_proc_core()  local
277 	error = mac_cred_check_relabel(p->p_ucred, intlabel);  in mac_set_proc_core()
278 	if (error)  in mac_set_proc_core()
279 		return (error);  in mac_set_proc_core()
312 	int error;  in mac_get_prison()  local
320 		error = vfs_copyopt(opts, "mac.label", &mac32, sizeof(mac32));  in mac_get_prison()
321 		if (error == 0) {  in mac_get_prison()
327 		error = vfs_copyopt(opts, "mac.label", &mac, sizeof(mac));  in mac_get_prison()
328 	if (error) {  in mac_get_prison()
329 		if (error != ENOENT)  in mac_get_prison()
336 		error = ENOMEM;  in mac_get_prison()
352 	error = mac_label_copyin_string(&mac, &u_buffer, M_WAITOK);  in mac_get_prison()
353 	if (error) {  in mac_get_prison()
360 		error = ENOMEM;  in mac_get_prison()
364 	error = mac_prison_externalize_label(intlabel, mac.m_string,  in mac_get_prison()
367 	if (error == 0)  in mac_get_prison()
368 		error = copyout(buffer, u_buffer, strlen(buffer)+1);  in mac_get_prison()
377 		MPASS(error != 0);  in mac_get_prison()
381 	return (error);  in mac_get_prison()
390 	int error;  in mac_set_prison_prepare()  local
396 		error = vfs_copyopt(opts, "mac.label", &mac32, sizeof(mac32));  in mac_set_prison_prepare()
397 		if (error == 0) {  in mac_set_prison_prepare()
403 		error = vfs_copyopt(opts, "mac.label", &mac, sizeof(mac));  in mac_set_prison_prepare()
404 	if (error) {  in mac_set_prison_prepare()
405 		if (error != ENOENT)  in mac_set_prison_prepare()
407 		return (error);  in mac_set_prison_prepare()
410 	error = mac_label_copyin_string(&mac, NULL, M_WAITOK);  in mac_set_prison_prepare()
411 	if (error) {  in mac_set_prison_prepare()
413 		return (error);  in mac_set_prison_prepare()
426 	error = mac_prison_internalize_label(intlabel, mac.m_string);  in mac_set_prison_prepare()
427 	if (error) {  in mac_set_prison_prepare()
430 		return (error);  in mac_set_prison_prepare()
462 	int error;  in sys___mac_set_proc()  local
464 	error = mac_label_copyin(uap->mac_p, &mac, NULL);  in sys___mac_set_proc()
465 	if (error)  in sys___mac_set_proc()
466 		return (error);  in sys___mac_set_proc()
468 	error = mac_set_proc_prepare(td, &mac, &intlabel);  in sys___mac_set_proc()
469 	if (error)  in sys___mac_set_proc()
478 	error = mac_set_proc_core(td, newcred, intlabel);  in sys___mac_set_proc()
479 	if (error) {  in sys___mac_set_proc()
491 	mac_set_proc_finish(td, error == 0, intlabel);  in sys___mac_set_proc()
494 	return (error);  in sys___mac_set_proc()
509 	int error;  in sys___mac_get_fd()  local
511 	error = mac_label_copyin(uap->mac_p, &mac, &u_buffer);  in sys___mac_get_fd()
512 	if (error)  in sys___mac_get_fd()
513 		return (error);  in sys___mac_get_fd()
516 	error = fget(td, uap->fd, cap_rights_init_one(&rights, CAP_MAC_GET),  in sys___mac_get_fd()
518 	if (error)  in sys___mac_get_fd()
525 			error = EINVAL;  in sys___mac_get_fd()
533 		error = mac_vnode_externalize_label(intlabel, mac.m_string,  in sys___mac_get_fd()
540 			error = EINVAL;  in sys___mac_get_fd()
548 		error = mac_pipe_externalize_label(intlabel, mac.m_string,  in sys___mac_get_fd()
555 			error = EINVAL;  in sys___mac_get_fd()
563 		error = mac_socket_externalize_label(intlabel, mac.m_string,  in sys___mac_get_fd()
570 			error = EINVAL;  in sys___mac_get_fd()
574 		error = jaildesc_get_prison(fp, &pr);  in sys___mac_get_fd()
575 		if (error != 0)  in sys___mac_get_fd()
582 		error = mac_prison_externalize_label(intlabel, mac.m_string,  in sys___mac_get_fd()
588 		error = EINVAL;  in sys___mac_get_fd()
590 	if (error == 0)  in sys___mac_get_fd()
591 		error = copyout(buffer, u_buffer, strlen(buffer)+1);  in sys___mac_get_fd()
597 	return (error);  in sys___mac_get_fd()
622 	int error;  in kern___mac_get_path()  local
627 	error = mac_label_copyin(mac_p, &mac, &u_buffer);  in kern___mac_get_path()
628 	if (error)  in kern___mac_get_path()
629 		return (error);  in kern___mac_get_path()
633 	error = namei(&nd);  in kern___mac_get_path()
634 	if (error)  in kern___mac_get_path()
639 	error = mac_vnode_externalize_label(intlabel, mac.m_string, buffer,  in kern___mac_get_path()
645 	if (error == 0)  in kern___mac_get_path()
646 		error = copyout(buffer, u_buffer, strlen(buffer)+1);  in kern___mac_get_path()
652 	return (error);  in kern___mac_get_path()
667 	int error;  in sys___mac_set_fd()  local
669 	error = mac_label_copyin(uap->mac_p, &mac, NULL);  in sys___mac_set_fd()
670 	if (error)  in sys___mac_set_fd()
671 		return (error);  in sys___mac_set_fd()
673 	error = fget(td, uap->fd, cap_rights_init_one(&rights, CAP_MAC_SET),  in sys___mac_set_fd()
675 	if (error)  in sys___mac_set_fd()
682 			error = EINVAL;  in sys___mac_set_fd()
686 		error = mac_vnode_internalize_label(intlabel, mac.m_string);  in sys___mac_set_fd()
687 		if (error) {  in sys___mac_set_fd()
692 		error = vn_start_write(vp, &mp, V_WAIT | V_PCATCH);  in sys___mac_set_fd()
693 		if (error != 0) {  in sys___mac_set_fd()
698 		error = vn_setlabel(vp, intlabel, td->td_ucred);  in sys___mac_set_fd()
706 			error = EINVAL;  in sys___mac_set_fd()
710 		error = mac_pipe_internalize_label(intlabel, mac.m_string);  in sys___mac_set_fd()
711 		if (error == 0) {  in sys___mac_set_fd()
714 			error = mac_pipe_label_set(td->td_ucred,  in sys___mac_set_fd()
723 			error = EINVAL;  in sys___mac_set_fd()
727 		error = mac_socket_internalize_label(intlabel, mac.m_string);  in sys___mac_set_fd()
728 		if (error == 0) {  in sys___mac_set_fd()
730 			error = mac_socket_label_set(td->td_ucred, so,  in sys___mac_set_fd()
738 			error = EINVAL;  in sys___mac_set_fd()
744 		error = mac_prison_internalize_label(intlabel, mac.m_string);  in sys___mac_set_fd()
745 		if (error == 0)  in sys___mac_set_fd()
746 			error = jaildesc_get_prison(fp, &pr);  in sys___mac_set_fd()
747 		if (error == 0) {  in sys___mac_set_fd()
749 			error = mac_prison_label_set(td->td_ucred, pr,  in sys___mac_set_fd()
758 		error = EINVAL;  in sys___mac_set_fd()
764 	return (error);  in sys___mac_set_fd()
789 	int error;  in kern___mac_set_path()  local
794 	error = mac_label_copyin(mac_p, &mac, NULL);  in kern___mac_set_path()
795 	if (error)  in kern___mac_set_path()
796 		return (error);  in kern___mac_set_path()
799 	error = mac_vnode_internalize_label(intlabel, mac.m_string);  in kern___mac_set_path()
801 	if (error)  in kern___mac_set_path()
805 	error = namei(&nd);  in kern___mac_set_path()
806 	if (error == 0) {  in kern___mac_set_path()
807 		error = vn_start_write(nd.ni_vp, &mp, V_WAIT | V_PCATCH);  in kern___mac_set_path()
808 		if (error == 0) {  in kern___mac_set_path()
809 			error = vn_setlabel(nd.ni_vp, intlabel,  in kern___mac_set_path()
818 	return (error);  in kern___mac_set_path()
826 	int error;  in sys_mac_syscall()  local
828 	error = copyinstr(uap->policy, target, sizeof(target), NULL);  in sys_mac_syscall()
829 	if (error)  in sys_mac_syscall()
830 		return (error);  in sys_mac_syscall()
832 	error = ENOSYS;  in sys_mac_syscall()
836 			error = mpc->mpc_ops->mpo_syscall(td,  in sys_mac_syscall()
847 				error = mpc->mpc_ops->mpo_syscall(td,  in sys_mac_syscall()
855 	return (error);  in sys_mac_syscall()