Function report

Linux Kernel

v5.5.9

Brick Technologies Co., Ltd

Source Code:security\selinux\hooks.c Create Date:2022-07-28 18:58:11
Last Modify:2020-03-12 14:18:49 Copyright©Brick
home page Tree
Annotation kernel can get tool activityDownload SCCTChinese

Name:file_map_prot_check

Proto:static int file_map_prot_check(struct file *file, unsigned long prot, int shared)

Type:int

Parameter:

TypeParameterName
struct file *file
unsigned longprot
intshared
3662  cred = current_cred - Access the current task's subjective credentials* Access the subjective credentials of the current task. RCU-safe,* since nobody else can modify it.()
3663  sid = get the security ID of a set of credentials
3664  rc = 0
3666  If default_noexec && prot & page can be executed && ( Not file || IS_PRIVATE(file_inode(file)) || Not shared && prot & page can be written ) Then
3674  rc = avc_has_perm - Check permissions and perform any appropriate auditing
3677  If rc Then Go to error
3681  If file Then
3683  av = FILE__READ
3686  If shared && prot & page can be written Then av |= FILE__WRITE
3689  If prot & page can be executed Then av |= FILE__EXECUTE
3692  Return Check whether a task can use an open file descriptor toaccess an inode in a given way. Check access to thedescriptor itself, and then use dentry_has_perm tocheck a particular permission to the file.Access to the descriptor is implicitly granted if it
3695  error :
3696  Return rc
Caller
NameDescribe
selinux_mmap_file
selinux_file_mprotect