Function report

Linux Kernel

v5.5.9

Brick Technologies Co., Ltd

Source Code:security\integrity\ima\ima_fs.c Create Date:2022-07-28 19:57:48
Last Modify:2020-03-12 14:18:49 Copyright©Brick
home page Tree
Annotation kernel can get tool activityDownload SCCTChinese

Name:ma_release_policy - start using the new measure policy rules.* Initially, ima_measure points to the default policy rules, now* point to the new policy rules, and remove the securityfs policy file,* assuming a valid policy.

Proto:static int ima_release_policy(struct inode *inode, struct file *file)

Type:int

Parameter:

TypeParameterName
struct inode *inode
struct file *file
411  cause = If valid_policy Then "completed" Else "failed"
413  If (f_flags & O_ACCMODE) == O_RDONLY Then Return seq_release(inode, file)
416  If valid_policy && ima_check_policy() < 0 Then
417  cause = "failed"
418  valid_policy = 0
421  pr_info("policy update %s\n", cause)
422  integrity_audit_msg(Integrity enable status , NULL, NULL, "policy_update", cause, !valid_policy, 0)
425  If Not valid_policy Then
426  ima_delete_rules()
427  valid_policy = 1
428  lear_bit - Clears a bit in memory*@nr: Bit to clear*@addr: Address to start counting from* This is a relaxed atomic operation (no implied memory barriers).
429  Return 0
432  ima_update_policy()
434  securityfs_remove - removes a file or directory from the securityfs filesystem*@dentry: a pointer to a the dentry of the file or directory to be removed
435  ima_policy = NULL
441  Return 0