Function report

Linux Kernel

v5.5.9

Brick Technologies Co., Ltd

Source Code:security\apparmor\policy_ns.c Create Date:2022-07-28 19:54:11
Last Modify:2020-03-12 14:18:49 Copyright©Brick
home page Tree
Annotation kernel can get tool activityDownload SCCTChinese

Name:aa_ns_visible - test if @view is visible from @curr*@curr: namespace to treat as the parent (NOT NULL)*@view: namespace to test if visible from @curr (NOT NULL)*@subns: whether view of a subns is allowed* Returns: true if @view is visible from @curr else

Proto:bool aa_ns_visible(struct aa_ns *curr, struct aa_ns *view, bool subns)

Type:bool

Parameter:

TypeParameterName
struct aa_ns *curr
struct aa_ns *view
boolsubns
39  If curr == view Then Return true
42  If Not subns Then Return false
45  When view cycle
46  If parent == curr Then Return true
50  Return false
Caller
NameDescribe
label_compound_matchlabel_compound_match - find perms for full compound label*@profile: profile to find perms for*@label: label to check access permissions for*@stack: whether this is a stacking request*@start: state to start match in*@subns: whether to do permission checks
label_components_matchlabel_components_match - find perms for all subcomponents of a label*@profile: profile to find perms for*@label: label to check access permissions for*@stack: whether this is a stacking request*@start: state to start match in*@subns: whether to do
policy_view_capablepolicy_view_capable - check if viewing policy in at @ns is allowed* Returns: true if viewing policy is allowed* If @ns is NULL then the namespace being viewed is assumed to be the* tasks current namespace.
aa_getprocattraa_getprocattr - Return the profile information for @profile*@profile: the profile to print profile info about (NOT NULL)*@string: Returns - string containing the profile info (NOT NULL)* Returns: length of @string on success else error on failure*
aa_ns_nameaa_na_name - Find the ns name to display for @view from @curr*@curr - current namespace (NOT NULL)*@view - namespace attempting to view (NOT NULL)*@subns - are subns visible* Returns: name of @view visible from @curr
label_is_visible
label_compound_matchlabel_compound_match - find perms for full compound label*@profile: profile to find perms for*@label: label to check access permissions for*@start: state to start match in*@subns: whether to do permission checks on components in a subns*@request:
label_components_matchlabel_components_match - find perms for all subcomponents of a label*@profile: profile to find perms for*@label: label to check access permissions for*@start: state to start match in*@subns: whether to do permission checks on components in a
label_modename
display_mode any visible label is not unconfined the display_mode returns true
aa_label_snxprintaa_label_snxprint - print a label name to a string buffer*@str: buffer to write to