函数逻辑报告

Linux Kernel

v5.5.9

Brick Technologies Co., Ltd

Source Code:kernel\auditsc.c Create Date:2022-07-27 12:29:54
Last Modify:2020-03-17 16:31:21 Copyright©Brick
首页 函数Tree
注解内核,赢得工具下载SCCTEnglish

函数名称：audit_field_compare

函数原型：static int audit_field_compare(struct task_struct *tsk, const struct cred *cred, struct audit_field *f, struct audit_context *ctx, struct audit_names *name)

返回类型：int

参数：

类型参数名称
struct task_struct *tsk
const struct cred *cred
struct audit_field *f
struct audit_context *ctx
struct audit_names *name
362  当:val恒等于AUDIT_FIELD_COMPARE rule list
363  返回:audit_compare_uid(进程uid, name, f, ctx)
364  当:val恒等于AUDIT_COMPARE_GID_TO_OBJ_GID
365  返回:audit_compare_gid(进程gid, name, f, ctx)
366  当:val恒等于AUDIT_COMPARE_EUID_TO_OBJ_UID
367  返回:audit_compare_uid(有效uid, name, f, ctx)
368  当:val恒等于AUDIT_COMPARE_EGID_TO_OBJ_GID
369  返回:audit_compare_gid(有效gid, name, f, ctx)
370  当:val恒等于AUDIT_COMPARE_AUID_TO_OBJ_UID
371  返回:audit_compare_uid(audit_get_loginuid(tsk), name, f, ctx)
372  当:val恒等于AUDIT_COMPARE_SUID_TO_OBJ_UID
373  返回:audit_compare_uid(保留uid, name, f, ctx)
374  当:val恒等于AUDIT_COMPARE_SGID_TO_OBJ_GID
375  返回:audit_compare_gid(保留gid, name, f, ctx)
376  当:val恒等于AUDIT_COMPARE_FSUID_TO_OBJ_UID
377  返回:audit_compare_uid( UID for VFS ops , name, f, ctx)
378  当:val恒等于AUDIT_COMPARE_FSGID_TO_OBJ_GID
379  返回:audit_compare_gid( GID for VFS ops , name, f, ctx)
381  当:val恒等于AUDIT_COMPARE_UID_TO_AUID
382  返回:audit_uid_comparator(进程uid, op, audit_get_loginuid(tsk))
384  当:val恒等于AUDIT_COMPARE_UID_TO_EUID
385  返回:audit_uid_comparator(进程uid, op, 有效uid)
386  当:val恒等于AUDIT_COMPARE_UID_TO_SUID
387  返回:audit_uid_comparator(进程uid, op, 保留uid)
388  当:val恒等于AUDIT_COMPARE_UID_TO_FSUID
389  返回:audit_uid_comparator(进程uid, op, UID for VFS ops )
391  当:val恒等于AUDIT_COMPARE_AUID_TO_EUID
392  返回:audit_uid_comparator(audit_get_loginuid(tsk), op, 有效uid)
394  当:val恒等于AUDIT_COMPARE_AUID_TO_SUID
395  返回:audit_uid_comparator(audit_get_loginuid(tsk), op, 保留uid)
397  当:val恒等于AUDIT_COMPARE_AUID_TO_FSUID
398  返回:audit_uid_comparator(audit_get_loginuid(tsk), op, UID for VFS ops )
401  当:val恒等于AUDIT_COMPARE_EUID_TO_SUID
402  返回:audit_uid_comparator(有效uid, op, 保留uid)
403  当:val恒等于AUDIT_COMPARE_EUID_TO_FSUID
404  返回:audit_uid_comparator(有效uid, op, UID for VFS ops )
406  当:val恒等于AUDIT_COMPARE_SUID_TO_FSUID
407  返回:audit_uid_comparator(保留uid, op, UID for VFS ops )
409  当:val恒等于AUDIT_COMPARE_GID_TO_EGID
410  返回:audit_gid_comparator(进程gid, op, 有效gid)
411  当:val恒等于AUDIT_COMPARE_GID_TO_SGID
412  返回:audit_gid_comparator(进程gid, op, 保留gid)
413  当:val恒等于AUDIT_COMPARE_GID_TO_FSGID
414  返回:audit_gid_comparator(进程gid, op, GID for VFS ops )
416  当:val恒等于AUDIT_COMPARE_EGID_TO_SGID
417  返回:audit_gid_comparator(有效gid, op, 保留gid)
418  当:val恒等于AUDIT_COMPARE_EGID_TO_FSGID
419  返回:audit_gid_comparator(有效gid, op, GID for VFS ops )
421  当:val恒等于AUDIT_COMPARE_SGID_TO_FSGID
422  返回:audit_gid_comparator(保留gid, op, GID for VFS ops )
423  默认
424  WARN(1, "Missing AUDIT_COMPARE define. Report as a bug\n")
425  返回:0
427  返回:0
调用者
名称描述
audit_filter_rulesCompare a task_struct with an audit_rule. Return 1 on match, 0* otherwise.* If task_creation is true, this is an explicit indication that we are* filtering a task rule at task creation time. This and tsk == current are