Function report |
Source Code:kernel\auditsc.c |
Create Date:2022-07-28 11:26:40 |
| Last Modify:2020-03-17 16:31:21 | Copyright©Brick |
| home page | Tree |
| Annotation kernel can get tool activity | Download SCCT | Chinese |
Name:audit_field_compare
Proto:static int audit_field_compare(struct task_struct *tsk, const struct cred *cred, struct audit_field *f, struct audit_context *ctx, struct audit_names *name)
Type:int
Parameter:
| Type | Parameter | Name |
|---|---|---|
| struct task_struct * | tsk | |
| const struct cred * | cred | |
| struct audit_field * | f | |
| struct audit_context * | ctx | |
| struct audit_names * | name |
| 362 | Case val == AUDIT_FIELD_COMPARE rule list |
| 363 | Return audit_compare_uid( real UID of the task , name, f, ctx) |
| 364 | Case val == AUDIT_COMPARE_GID_TO_OBJ_GID |
| 365 | Return audit_compare_gid( real GID of the task , name, f, ctx) |
| 366 | Case val == AUDIT_COMPARE_EUID_TO_OBJ_UID |
| 367 | Return audit_compare_uid( effective UID of the task , name, f, ctx) |
| 368 | Case val == AUDIT_COMPARE_EGID_TO_OBJ_GID |
| 369 | Return audit_compare_gid( effective GID of the task , name, f, ctx) |
| 370 | Case val == AUDIT_COMPARE_AUID_TO_OBJ_UID |
| 371 | Return audit_compare_uid(audit_get_loginuid(tsk), name, f, ctx) |
| 372 | Case val == AUDIT_COMPARE_SUID_TO_OBJ_UID |
| 373 | Return audit_compare_uid( saved UID of the task , name, f, ctx) |
| 374 | Case val == AUDIT_COMPARE_SGID_TO_OBJ_GID |
| 375 | Return audit_compare_gid( saved GID of the task , name, f, ctx) |
| 376 | Case val == AUDIT_COMPARE_FSUID_TO_OBJ_UID |
| 377 | Return audit_compare_uid( UID for VFS ops , name, f, ctx) |
| 378 | Case val == AUDIT_COMPARE_FSGID_TO_OBJ_GID |
| 379 | Return audit_compare_gid( GID for VFS ops , name, f, ctx) |
| 381 | Case val == AUDIT_COMPARE_UID_TO_AUID |
| 382 | Return audit_uid_comparator( real UID of the task , op, audit_get_loginuid(tsk)) |
| 384 | Case val == AUDIT_COMPARE_UID_TO_EUID |
| 385 | Return audit_uid_comparator( real UID of the task , op, effective UID of the task ) |
| 386 | Case val == AUDIT_COMPARE_UID_TO_SUID |
| 387 | Return audit_uid_comparator( real UID of the task , op, saved UID of the task ) |
| 388 | Case val == AUDIT_COMPARE_UID_TO_FSUID |
| 389 | Return audit_uid_comparator( real UID of the task , op, UID for VFS ops ) |
| 391 | Case val == AUDIT_COMPARE_AUID_TO_EUID |
| 392 | Return audit_uid_comparator(audit_get_loginuid(tsk), op, effective UID of the task ) |
| 394 | Case val == AUDIT_COMPARE_AUID_TO_SUID |
| 395 | Return audit_uid_comparator(audit_get_loginuid(tsk), op, saved UID of the task ) |
| 397 | Case val == AUDIT_COMPARE_AUID_TO_FSUID |
| 398 | Return audit_uid_comparator(audit_get_loginuid(tsk), op, UID for VFS ops ) |
| 401 | Case val == AUDIT_COMPARE_EUID_TO_SUID |
| 402 | Return audit_uid_comparator( effective UID of the task , op, saved UID of the task ) |
| 403 | Case val == AUDIT_COMPARE_EUID_TO_FSUID |
| 404 | Return audit_uid_comparator( effective UID of the task , op, UID for VFS ops ) |
| 406 | Case val == AUDIT_COMPARE_SUID_TO_FSUID |
| 407 | Return audit_uid_comparator( saved UID of the task , op, UID for VFS ops ) |
| 409 | Case val == AUDIT_COMPARE_GID_TO_EGID |
| 410 | Return audit_gid_comparator( real GID of the task , op, effective GID of the task ) |
| 411 | Case val == AUDIT_COMPARE_GID_TO_SGID |
| 412 | Return audit_gid_comparator( real GID of the task , op, saved GID of the task ) |
| 413 | Case val == AUDIT_COMPARE_GID_TO_FSGID |
| 414 | Return audit_gid_comparator( real GID of the task , op, GID for VFS ops ) |
| 416 | Case val == AUDIT_COMPARE_EGID_TO_SGID |
| 417 | Return audit_gid_comparator( effective GID of the task , op, saved GID of the task ) |
| 418 | Case val == AUDIT_COMPARE_EGID_TO_FSGID |
| 419 | Return audit_gid_comparator( effective GID of the task , op, GID for VFS ops ) |
| 421 | Case val == AUDIT_COMPARE_SGID_TO_FSGID |
| 422 | Return audit_gid_comparator( saved GID of the task , op, GID for VFS ops ) |
| 423 | Default |
| 424 | WARN(1, "Missing AUDIT_COMPARE define. Report as a bug\n") |
| 425 | Return 0 |
| 427 | Return 0 |
| Name | Describe |
|---|---|
| audit_filter_rules | Compare a task_struct with an audit_rule. Return 1 on match, 0* otherwise.* If task_creation is true, this is an explicit indication that we are* filtering a task rule at task creation time. This and tsk == current are |
| Source code conversion tool public plug-in interface | X |
|---|---|
| Support c/c++/esqlc/java Oracle/Informix/Mysql Plug-in can realize: logical Report Code generation and batch code conversion |