Function report

Linux Kernel

v5.5.9

Brick Technologies Co., Ltd

Source Code:security\selinux\xfrm.c Create Date:2022-07-28 19:16:36
Last Modify:2020-03-12 14:18:49 Copyright©Brick
home page Tree
Annotation kernel can get tool activityDownload SCCTChinese

Name:LSM hook implementation that authorizes that a state matches* the given policy, flow combo.

Proto:int selinux_xfrm_state_pol_flow_match(struct xfrm_state *x, struct xfrm_policy *xp, const struct flowi *fl)

Type:int

Parameter:

TypeParameterName
struct xfrm_state *x
struct xfrm_policy *xp
const struct flowi *fl
182  If Not security Then If Security context Then
185  Return 0
186  Else Return 1
189  Else If Not Security context Then
192  Return 0
193  Else If Not Returns true if the xfrm contains a security blob for SELinux. Then
196  Return 0
198  state_sid = ctx_sid
200  If flowi_secid != state_sid Then Return 0
206  Return If avc_has_perm - Check permissions and perform any appropriate auditing Then 0 Else 1