函数逻辑报告 |
Source Code:security\apparmor\file.c |
Create Date:2022-07-27 21:41:51 |
| Last Modify:2020-03-12 14:18:49 | Copyright©Brick |
| 首页 | 函数Tree |
| 注解内核,赢得工具 | 下载SCCT | English |
函数名称:aa_audit_file - handle the auditing of file operations*@profile: the profile being enforced (NOT NULL)*@perms: the permissions computed for the request (NOT NULL)*@op: operation being mediated*@request: permissions requested*@name: name of object being
函数原型:int aa_audit_file(struct aa_profile *profile, struct aa_perms *perms, const char *op, unsigned int request, const char *name, const char *target, struct aa_label *tlabel, kuid_t ouid, const char *info, int error)
返回类型:int
参数:
| 类型 | 参数 | 名称 |
|---|---|---|
| struct aa_profile * | profile | |
| struct aa_perms * | perms | |
| const char * | op | |
| unsigned int | request | |
| const char * | name | |
| const char * | target | |
| struct aa_label * | tlabel | |
| kuid_t | ouid | |
| const char * | info | |
| int | error |
| 106 | type等于AUDIT_APPARMOR_AUTO |
| 109 | tsk = NULL |
| 117 | tsk = NULL |
| 119 | 如果此条件成立可能性大(为编译器优化)(!error)则 |
| 122 | 如果此条件成立可能性小(为编译器优化)(AUDIT_MODE(profile) == AUDIT_ALL)则mask等于0xffff |
| 128 | 如果此条件成立可能性大(为编译器优化)(!request)则返回:0 |
| 130 | type等于AUDIT_APPARMOR_AUDIT |
| 131 | 否则 |
| 名称 | 描述 |
|---|---|
| profile_onexec | |
| handle_onexec | sure none ns domain transitions are correctly applied with onexec |
| apparmor_bprm_set_creds | apparmor_bprm_set_creds - set the new creds on the bprm struct*@bprm: binprm for the exec (NOT NULL)* Returns: %0 or error on failure* TODO: once the other paths are done see if we can't refactor into a fn |
| build_change_hat | helper fn for change_hat* Returns: label for hat transition OR ERR_PTR. Does NOT return NULL |
| change_hat | helper fn for changing into a hat* Returns: label for hat transition or ERR_PTR. Does not return NULL |
| aa_change_hat | aa_change_hat - change hat to/from subprofile*@hats: vector of hat names to try changing into (MAYBE NULL if @count == 0)*@count: number of hat names in @hats*@token: magic value to validate the hat change*@flags: flags affecting behavior of the change |
| change_profile_perms_wrapper | |
| aa_change_profile | aa_change_profile - perform a one-way profile transition*@fqname: name of profile may include namespace (NOT NULL)*@onexec: whether this transition is to take place immediately or at exec*@flags: flags affecting change behavior |
| path_name | |
| __aa_path_perm | |
| profile_path_link | |
| profile_transition |
| 源代码转换工具 开放的插件接口 | X |
|---|---|
| 支持:c/c++/esqlc/java Oracle/Informix/Mysql 插件可实现:逻辑报告 代码生成和批量转换代码 |