policy_view_capable

函数名称：policy_view_capable - check if viewing policy in at @ns is allowed* Returns: true if viewing policy is allowed* If @ns is NULL then the namespace being viewed is assumed to be the* tasks current namespace.

函数原型：bool policy_view_capable(struct aa_ns *ns)

返回类型：bool

参数：

类型	参数	名称
struct aa_ns *	ns	namespace being viewed by current task (may be NULL)

644

user_ns等于current_user_ns()

645

view_ns等于aa_get_current_ns()

646

root_in_user_ns等于uid_eq(current_euid(), make_kuid - Map a user-namespace uid pair into a kuid)或in_egroup_p(make_kgid - Map a user-namespace gid pair into a kgid)

648

bool response = false

649

如果非 namespace being viewed by current task (may be NULL)则 namespace being viewed by current task (may be NULL)等于view_ns

652

如果root_in_user_ns且aa_ns_visible(view_ns, namespace being viewed by current task (may be NULL), true)且user_ns恒等于userns count is 1 for root user, 1 for init_uts_ns,* and 1 for... ?或unprivileged_userns_apparmor_policy不等于0且level恒等于level的值则response = true

657

aa_put_ns - decrement refcount on @ns*@ns: namespace to put reference of* Decrement reference count of @ns and if no longer in use free it

659

返回:response

**调用者**
名称	描述
profiles_open
policy_admin_capable
param_get_aalockpolicy
param_get_aabool
param_get_aauint
param_get_aacompressionlevel
param_get_audit
param_get_mode
rawdata_open

源代码转换工具开放的插件接口	X
支持：c/c++/esqlc/java Oracle/Informix/Mysql 插件可实现：逻辑报告代码生成和批量转换代码

函数逻辑报告