函数逻辑报告

Linux Kernel

v5.5.9

Brick Technologies Co., Ltd

Source Code:kernel\audit.c Create Date:2022-07-27 12:26:58
Last Modify:2020-03-12 14:18:49 Copyright©Brick
首页 函数Tree
注解内核,赢得工具下载SCCTEnglish

函数名称：audit_signal_info - record signal info for shutting down audit subsystem*@sig: signal value*@t: task being signaled* If the audit subsystem is being terminated, record the task (pid)* and uid that is doing that.

函数原型：int audit_signal_info(int sig, struct task_struct *t)

返回类型：int

参数：

类型参数名称
intsig
struct task_struct *t
2276  uid等于current_uid()
2278  如果auditd_test_task - Check to see if a given task is an audit daemon*@task: the task to check* Description:* Return 1 if the task is a registered audit daemon, 0 otherwise.且sig恒等于SIGTERM或sig恒等于SIGHUP或sig恒等于SIGUSR1或sig恒等于SIGUSR2的值则
2281  audit_sig_pid等于task_tgid_nr(当前进程)
2282  auid等于audit_get_loginuid(当前进程)
2283  如果uid_valid(auid)则The identity of the user shutting down the audit system. 等于auid
2285  否则The identity of the user shutting down the audit system. 等于uid
2287  security_task_getsecid(当前进程, & audit_sig_sid)
2290  返回:audit_signal_info_syscall(t)
调用者
名称描述
check_kill_permissionBad permissions for sending the signal* - the caller must hold the RCU read lock