函数逻辑报告

Linux Kernel

v5.5.9

Brick Technologies Co., Ltd

Source Code:security\apparmor\include\cred.h Create Date:2022-07-27 21:20:58
Last Modify:2020-03-12 14:18:49 Copyright©Brick
首页 函数Tree
注解内核,赢得工具下载SCCTEnglish

函数名称:gin_current_label_crit_section - current's confining label and update it* Returns: up to date confining label or the ns unconfined label (NOT NULL)* Not safe to call inside locks* The returned reference must be put with end_current_label_crit_section()*

函数原型:static inline struct aa_label *begin_current_label_crit_section(void)

返回类型:struct aa_label

参数:

162  label等于aa_current_raw_label - find the current tasks confining label* Returns: up to date confining label or the ns unconfined label (NOT NULL)* This fn will not update the tasks cred to the most up to date version
164  might_sleep()
166  如果label_is_stale(label)则
167  label等于aa_get_newest_label - find the newest version of @l*@l: the label to check for newer versions of* Returns: refcounted newest version of @l taking into account* replacement, renames and removals* return @l.
168  如果aa_replace_current_label - replace the current tasks label*@label: new label (NOT NULL)* Returns: 0 or error on failure恒等于0则aa_put_label(label)
173  返回:label
调用者
名称描述
policy_update
profile_remove.remove file hook fn to remove loaded policy
query_dataquery_data - queries a policy and writes its data to buf*@buf: the resulting data is stored here (NOT NULL)*@buf_len: size of buf*@query: query string used to retrieve data*@query_len: size of query including second NUL byte
query_labelquery_label - queries a label and writes permissions to buf*@buf: the resulting permissions string is stored here (NOT NULL)*@buf_len: size of buf*@query: binary query string to match against the dfa*@query_len: size of query*@view_only: only compute for
seq_ns_stacked_show
seq_ns_nsstacked_show
seq_ns_level_show
seq_ns_name_show
ns_mkdir_op
ns_rmdir_op
apparmor_path_link
apparmor_path_rename
apparmor_file_alloc_security
apparmor_setprocattr
apparmor_socket_createapparmor_socket_create - check perms before creating a new socket
apparmor_socket_getpeersec_streamapparmor_socket_getpeersec_stream - get security context of peer* Note: for tcp only valid if using ipsec or cipso on lan
aa_sk_perm