Sample Entry Point

• Consider a sample access control entry point

  • Service:
    • vn_open_cred(ndp, flagp, cmode, cred)
  • Framework:
    • mac_cred_check_open_vnode(cred, vnode, flags)
  • Module:
    • mpo_cred_check_open_vnode(cred, vnode, vnodelabel, flags)

• Results of checks from various modules are composed by the MAC framework