函数逻辑报告

Linux Kernel

v5.5.9

Brick Technologies Co., Ltd

Source Code:kernel\auditsc.c Create Date:2022-07-27 12:31:47
Last Modify:2020-03-17 16:31:21 Copyright©Brick
首页 函数Tree
注解内核,赢得工具下载SCCTEnglish

函数名称:__audit_log_bprm_fcaps - store information about a loading bprm and relevant fcaps*@bprm: pointer to the bprm being processed*@new: the proposed new credentials*@old: the old credentials* Simply check if the proc already has the caps given by the file and

函数原型:int __audit_log_bprm_fcaps(struct linux_binprm *bprm, const struct cred *new, const struct cred *old)

返回类型:int

参数:

类型参数名称
struct linux_binprm *bprm
const struct cred *new
const struct cred *old
2445  context等于audit_context()
2448  ax等于开辟内存
2449  如果非ax则返回:负ENOMEM
2452  type等于Information about fcaps increasing perms
2453  next等于审计数据
2454  审计数据等于ax
2456  Extract the on-exec-apply capability sets for an executable file.
2458  permitted等于permitted
2459  inheritable等于inheritable
2460  effective bit of file cap 等于非非magic_etc按位与VFS_CAP_FLAGS_EFFECTIVE的值
2461  rootid等于rootid
2462  fcap_ver等于magic_etc按位与VFS_CAP_REVISION_MASK的值右移VFS_CAP_REVISION_SHIFT
2464  permitted等于 caps we're permitted
2465  inheritable等于 caps our children can inherit
2466  effective set of process 等于 caps we can actually use
2467  ambient等于 Ambient capability set
2469  permitted等于 caps we're permitted
2470  inheritable等于 caps our children can inherit
2471  effective set of process 等于 caps we can actually use
2472  ambient等于 Ambient capability set
2473  返回:0