Function report

Linux Kernel

v5.5.9

Brick Technologies Co., Ltd

Source Code:security\smack\smack_access.c Create Date:2022-07-28 19:25:25
Last Modify:2020-03-12 14:18:49 Copyright©Brick
home page Tree
Annotation kernel can get tool activityDownload SCCTChinese

Name:smk_tskacc - determine if a task has a specific access to an object*@tsp: a pointer to the subject's task*@obj_known: a pointer to the object's label entry*@mode: the access requested, in "MAY" format*@a : common audit data* This function checks the

Proto:int smk_tskacc(struct task_smack *tsp, struct smack_known *obj_known, unsigned int mode, struct smk_audit_info *a)

Type:int

Parameter:

TypeParameterName
struct task_smack *tsp
struct smack_known *obj_known
unsigned intmode
struct smk_audit_info *a
222  sbj_known = Present a pointer to the smack label entry in an task blob.
229  rc = smk_access - determine if a subject has a specific access to an object*@subject: a pointer to the subject's Smack label entry*@object: a pointer to the object's Smack label entry*@request: the access requested, in "MAY" format*@a : a pointer to the audit
230  If rc >= 0 Then
235  may = smk_access_entry - look up matching access rule*@subject_label: a pointer to the subject's Smack label*@object_label: a pointer to the object's Smack label*@rule_list: the list of rules to search* This function looks up the subject/object pair in the
238  If may < 0 Then Go to out_audit
240  If (mode & may) == mode Then Go to out_audit
242  rc = -EACCES
248  If rc != 0 && smack_privileged - are all privilege requirements met*@cap: The requested capability* Is the task privileged and allowed to be privileged* by the onlycap rule.* Returns true if the task is allowed to be privileged, false if it's not. Then rc = 0
251  out_audit :
253  If a Then smack_log - Audit the granting or denial of permissions
257  Return rc
Caller
NameDescribe
smack_file_opensmack_file_open - Smack dentry open processing*@file: the object* Set the security blob in the file structure.* Allow the open only if the task has read access. There are* many read operations (e.g. fstat) that you can do with an
smk_curaccsmk_curacc - determine if current has a specific access to an object*@obj_known: a pointer to the object's Smack label entry*@mode: the access requested, in "MAY" format*@a : common audit data* This function checks the current subject label/object label
smk_ptrace_rule_checksmk_ptrace_rule_check - helper for ptrace access*@tracer: tracer process*@tracee_known: label entry of the process that's about to be traced*@mode: ptrace attachment mode (PTRACE_MODE_*)*@func: name of the function that called us, used for audit* Returns