函数逻辑报告 |
Source Code:security\apparmor\file.c |
Create Date:2022-07-27 21:41:51 |
Last Modify:2020-03-12 14:18:49 | Copyright©Brick |
首页 | 函数Tree |
注解内核,赢得工具 | 下载SCCT | English |
函数名称:aa_audit_file - handle the auditing of file operations*@profile: the profile being enforced (NOT NULL)*@perms: the permissions computed for the request (NOT NULL)*@op: operation being mediated*@request: permissions requested*@name: name of object being
函数原型:int aa_audit_file(struct aa_profile *profile, struct aa_perms *perms, const char *op, unsigned int request, const char *name, const char *target, struct aa_label *tlabel, kuid_t ouid, const char *info, int error)
返回类型:int
参数:
类型 | 参数 | 名称 |
---|---|---|
struct aa_profile * | profile | |
struct aa_perms * | perms | |
const char * | op | |
unsigned int | request | |
const char * | name | |
const char * | target | |
struct aa_label * | tlabel | |
kuid_t | ouid | |
const char * | info | |
int | error |
106 | type等于AUDIT_APPARMOR_AUTO |
109 | tsk = NULL |
117 | tsk = NULL |
119 | 如果此条件成立可能性大(为编译器优化)(!error)则 |
122 | 如果此条件成立可能性小(为编译器优化)(AUDIT_MODE(profile) == AUDIT_ALL)则mask等于0xffff |
128 | 如果此条件成立可能性大(为编译器优化)(!request)则返回:0 |
130 | type等于AUDIT_APPARMOR_AUDIT |
131 | 否则 |
名称 | 描述 |
---|---|
profile_onexec | |
handle_onexec | sure none ns domain transitions are correctly applied with onexec |
apparmor_bprm_set_creds | apparmor_bprm_set_creds - set the new creds on the bprm struct*@bprm: binprm for the exec (NOT NULL)* Returns: %0 or error on failure* TODO: once the other paths are done see if we can't refactor into a fn |
build_change_hat | helper fn for change_hat* Returns: label for hat transition OR ERR_PTR. Does NOT return NULL |
change_hat | helper fn for changing into a hat* Returns: label for hat transition or ERR_PTR. Does not return NULL |
aa_change_hat | aa_change_hat - change hat to/from subprofile*@hats: vector of hat names to try changing into (MAYBE NULL if @count == 0)*@count: number of hat names in @hats*@token: magic value to validate the hat change*@flags: flags affecting behavior of the change |
change_profile_perms_wrapper | |
aa_change_profile | aa_change_profile - perform a one-way profile transition*@fqname: name of profile may include namespace (NOT NULL)*@onexec: whether this transition is to take place immediately or at exec*@flags: flags affecting change behavior |
path_name | |
__aa_path_perm | |
profile_path_link | |
profile_transition |
源代码转换工具 开放的插件接口 | X |
---|---|
支持:c/c++/esqlc/java Oracle/Informix/Mysql 插件可实现:逻辑报告 代码生成和批量转换代码 |