Function report

Linux Kernel

v5.5.9

Brick Technologies Co., Ltd

Source Code:security\selinux\hooks.c Create Date:2022-07-28 18:58:20
Last Modify:2020-03-12 14:18:49 Copyright©Brick
home page Tree
Annotation kernel can get tool activityDownload SCCTChinese

Name:selinux_file_mprotect

Proto:static int selinux_file_mprotect(struct vm_area_struct *vma, unsigned long reqprot, unsigned long prot)

Type:int

Parameter:

TypeParameterName
struct vm_area_struct *vma
unsigned longreqprot
unsigned longprot
3739  cred = current_cred - Access the current task's subjective credentials* Access the subjective credentials of the current task. RCU-safe,* since nobody else can modify it.()
3740  sid = get the security ID of a set of credentials
3742  If checkreqprot Then prot = reqprot
3745  If default_noexec && prot & page can be executed && Not (Flags, see mm.h. & VM_EXEC) Then
3747  rc = 0
3748  If Our start address within vm_mm. >= start_brk && The first byte after our end addresswithin vm_mm. <= brk Then
3750  rc = avc_has_perm - Check permissions and perform any appropriate auditing
3753  Else if Not File we map to (can be NULL). && ( Our start address within vm_mm. <= start_stack && The first byte after our end addresswithin vm_mm. >= start_stack || Check if the vma is being used as a stack by this task ) Then
3757  rc = avc_has_perm - Check permissions and perform any appropriate auditing
3760  Else if File we map to (can be NULL). && Serialized by page_table_lock Then
3768  rc = Check whether a task can use an open file descriptor toaccess an inode in a given way. Check access to thedescriptor itself, and then use dentry_has_perm tocheck a particular permission to the file.Access to the descriptor is implicitly granted if it
3770  If rc Then Return rc
3774  Return file_map_prot_check(File we map to (can be NULL). , prot, Flags, see mm.h. & VM_SHARED)