Caller| Name | Describe |
|---|
| selinux_netlbl_skbuff_getsid | selinux_netlbl_skbuff_getsid - Get the sid of a packet using NetLabel*@skb: the packet*@family: protocol family*@type: NetLabel labeling protocol type*@sid: the SID* Description:* Call the NetLabel mechanism to get the security attributes of the given* |
| selinux_netlbl_skbuff_setsid | selinux_netlbl_skbuff_setsid - Set the NetLabel on a packet given a sid*@skb: the packet*@family: protocol family*@sid: the SID* Description* Call the NetLabel mechanism to set the label of a packet using @sid. |
| selinux_netlbl_sctp_assoc_request | selinux_netlbl_sctp_assoc_request - Label an incoming sctp association.*@ep: incoming association endpoint.*@skb: the packet.* Description:* A new incoming connection is represented by @ep, ......* Returns zero on success, negative values on failure. |
| selinux_netlbl_inet_conn_request | selinux_netlbl_inet_conn_request - Label an incoming stream connection*@req: incoming connection request socket* Description:* A new incoming connection request is represented by @req, we need to label* the new request_sock here and the stack will ensure |
| selinux_netlbl_sock_rcv_skb | selinux_netlbl_sock_rcv_skb - Do an inbound access check using NetLabel*@sksec: the sock's sk_security_struct*@skb: the packet*@family: protocol family*@ad: the audit data* Description:* Fetch the NetLabel security attributes from @skb and perform an |
| selinux_netlbl_socket_setsockopt | selinux_netlbl_socket_setsockopt - Do not allow users to remove a NetLabel*@sock: the socket*@level: the socket level or protocol*@optname: the socket option name* Description:* Check the setsockopt() call and if the user is trying to replace the IP* |
| smack_socket_sock_rcv_skb | smack_socket_sock_rcv_skb - Smack packet delivery access check*@sk: socket*@skb: packet* Returns 0 if the packet should be delivered, an error code otherwise |
| smack_socket_getpeersec_dgram | smack_socket_getpeersec_dgram - pull in packet label*@sock: the peer socket*@skb: packet data*@secid: pointer to where to put the secid of the packet* Sets the netlabel socket state on sk from parent |
| smack_inet_conn_request | smack_inet_conn_request - Smack access check on connect*@sk: socket involved*@skb: packet*@req: unused* Returns 0 if a task with the packet label could write to* the socket, otherwise an error code |