Function report

Linux Kernel

v5.5.9

Brick Technologies Co., Ltd

Source Code:security\apparmor\policy_unpack.c Create Date:2022-07-28 19:52:12
Last Modify:2020-03-12 14:18:49 Copyright©Brick
home page Tree
Annotation kernel can get tool activityDownload SCCTChinese

Name:audit_iface - do audit message for policy unpacking/load/replace/remove*@new: profile if it has been allocated (MAYBE NULL)*@ns_name: name of the ns the profile is to be loaded to (MAY BE NULL)*@name: name of the profile being manipulated (MAYBE

Proto:static int audit_iface(struct aa_profile *new, const char *ns_name, const char *name, const char *info, struct aa_ext *e, int error)

Type:int

Parameter:

TypeParameterName
struct aa_profile *new
const char *ns_name
const char *name
const char *info
struct aa_ext *e
interror
109  profile = labels_profile(aa_current_raw_label - find the current tasks confining label* Returns: up to date confining label or the ns unconfined label (NOT NULL)* This fn will not update the tasks cred to the most up to date version)
110  TODO: cleanup audit init so we don't need _aad = {0,} (sa, LSM_AUDIT_DATA_NONE, NULL)
111  If e Then pos = pointer to current position in the buffer - start
113  ns = ns_name
114  If new Then name = hname
116  Else name = name
118  info = info
119  error = error
121  Return aa_audit - Log a profile based audit event to the audit subsystem*@type: audit type for the message*@profile: profile to check against (NOT NULL)*@sa: audit event (NOT NULL)*@cb: optional callback fn for type specific fields (MAYBE NULL)* Handle default
Caller
NameDescribe
unpack_profilepack_profile - unpack a serialized profile*@e: serialized data extent information (NOT NULL)* NOTE: unpack profile sets audit struct if there is a failure
verify_headerverify_head - unpack serialized stream header*@e: serialized data read head (NOT NULL)*@required: whether the header is required or optional*@ns: Returns - namespace if one is specified else NULL (NOT NULL)* Returns: error or 0 if header is good
verify_profileverify_profile - Do post unpack analysis to verify profile consistency*@profile: profile to verify (NOT NULL)* Returns: 0 if passes verification else error