aa_replace_profiles

函数名称：aa_replace_profiles - replace profile(s) on the profile list*@policy_ns: namespace load is occurring on*@label: label that is attempting to load/replace policy*@mask: permission mask*@udata: serialized data stream (NOT NULL)* unpack and replace a profile

函数原型：ssize_t aa_replace_profiles(struct aa_ns *policy_ns, struct aa_label *label, unsigned int mask, struct aa_loaddata *udata)

返回类型：ssize_t

参数：

类型	参数	名称
struct aa_ns *	policy_ns
struct aa_label *	label
unsigned int	mask
struct aa_loaddata *	udata

859

const char * ns_name = NULL, * info = NULL

860

struct aa_ns * ns = NULL

865

867

op等于如果mask按位与AA_MAY_REPLACE_POLICY则OP_PROF_REPL否则OP_PROF_LOAD

868

aa_get_loaddata - get a reference count from a counted data reference*@data: reference to get a count on* Returns: point to reference* Requires: @data to have a valid reference count on it. It is a bug

870

error等于aa_unpack - unpack packed binary profile(s) data loaded from user space*@udata: user data copied to kmem (NOT NULL)*@lh: list to place unpacked profiles in a aa_repl_ws*@ns: Returns namespace profile is in if specified else NULL (NOT NULL)* Unpack user

871

如果error则转到:out

879

count等于0

881

如果ns_name则

882

如果ns_name且字符串比较不等于0则

884

info等于"policy load has mixed namespaces"

885

error等于负EACCES

886

转到:fail

888

否则如果ns_name则

889

如果count则

890

info等于"policy load has mixed namespaces"

891

error等于负EACCES

892

转到:fail

894

ns_name等于ns_name

895

否则count自加

898

如果ns_name则

899

ns等于aa_prepare_ns - find an existing or create a new namespace of @name*@parent: ns to treat as parent*@name: the namespace to find or add (NOT NULL)* Returns: refcounted namespace or PTR_ERR if failed to create one

901

如果是错误则

902

op等于OP_PROF_LOAD

903

info等于"failed to prepare namespace"

904

error等于错误

905

ns = NULL

906

ent = NULL

907

转到:fail

909

否则ns等于aa_get_ns - increment references count on @ns*@ns: namespace to increment reference count of (MAYBE NULL)* Returns: pointer to @ns, if @ns is NULL returns NULL* Requires: @ns must be held with valid refcount when called

912

mutex_lock_nested( & lock, level)

915

如果aa_rawdata_eq(rawdata_ent, udata)则

918

tmp等于__aa_get_loaddata - get a reference count to uncounted data reference*@data: reference to get a count on* Returns: pointer to reference OR NULL if race is lost and reference is* being repeated

920

如果tmp则

921

aa_put_loaddata(udata)

922

udata等于tmp

923

931

rawdata等于aa_get_loaddata - get a reference count from a counted data reference*@data: reference to get a count on* Returns: point to reference* Requires: @data to have a valid reference count on it. It is a bug

932

error等于__lookup_replace - lookup replacement information for a profile*@ns - namespace the lookup occurs in*@hname - name of profile to lookup*@noreplace - true if not replacing an existing profile*@p - Returns: profile to be replaced*@info - Returns: info

935

如果error则转到:fail_lock

938

如果rename则

939

error等于__lookup_replace - lookup replacement information for a profile*@ns - namespace the lookup occurs in*@hname - name of profile to lookup*@noreplace - true if not replacing an existing profile*@p - Returns: profile to be replaced*@info - Returns: info

942

如果error则转到:fail_lock

947

ns等于aa_get_ns - increment references count on @ns*@ns: namespace to increment reference count of (MAYBE NULL)* Returns: pointer to @ns, if @ns is NULL returns NULL* Requires: @ns must be held with valid refcount when called

949

如果old或rename则继续下一循环

953

policy等于__lookup_parent - lookup the parent of a profile of name @hname*@ns: namespace to lookup profile in (NOT NULL)*@hname: hierarchical profile name to find parent of (NOT NULL)* Lookups up the parent of a fully qualified profile name, the profile* that

954

如果非policy则

956

p等于__list_lookup_parent( & lh, new)

957

如果非p则

958

error等于负ENOENT

959

info等于"parent does not exist"

960

转到:fail_lock

962

cu_assign_pointer() - assign to RCU-protected pointer*@p: pointer to assign to*@v: value to assign (publish)* Assigns the specified value to the specified RCU-protected* pointer, ensuring that any concurrent RCU readers will see* any prior initialization(parent, aa_get_profile - increment refcount on profile @p*@p: profile (MAYBE NULL)* Returns: pointer to @p if @p is NULL will return NULL* Requires: @p must be held with valid refcount when called)

963

否则如果policy不等于base则

965

p等于policy

966

cu_assign_pointer() - assign to RCU-protected pointer*@p: pointer to assign to*@v: value to assign (publish)* Assigns the specified value to the specified RCU-protected* pointer, ensuring that any concurrent RCU readers will see* any prior initialization(parent, aa_get_profile - increment refcount on profile @p*@p: profile (MAYBE NULL)* Returns: pointer to @p if @p is NULL will return NULL* Requires: @p must be held with valid refcount when called)

971

如果非dents[AAFS_LOADDATA_DIR]则

972

error等于__aa_fs_create_rawdata(ns, udata)

973

如果error则

974

info等于"failed to create raw_data dir and files"

975

ent = NULL

976

转到:fail_lock

980

如果非old则

982

如果cu_access_pointer() - fetch RCU pointer with no dereferencing*@p: The pointer to read* Return the value of the specified RCU-protected pointer, but omit the* lockdep checks for being in an RCU read-side critical section(parent)则

984

p等于aa_deref_parent(new)

985

parent等于prof_child_dir(p)

986

否则parent等于ns_subprofs_dir(ns)

988

error等于Requires: @profile->ns->lock held

991

如果error则

992

info等于"failed to create"

993

转到:fail_lock

998

__aa_bump_ns_revision(ns)

999

__aa_loaddata_update(udata, revision)

1001

删除链表项并重新初始化

1002

op等于如果非old且非rename则OP_PROF_LOAD否则OP_PROF_REPL

1004

如果old且rawdata恒等于rawdata则

1006

audit_policy - Do auditing of policy changes*@label: label to check if it can manage policy*@op: policy operation being performed*@ns_name: name of namespace being manipulated*@name: name of profile being manipulated (NOT NULL)*@info: any extra

1010

aa_put_proxy(proxy)

1011

proxy = NULL

1012

转到:skip

1019

audit_policy - Do auditing of policy changes*@label: label to check if it can manage policy*@op: policy operation being performed*@ns_name: name of namespace being manipulated*@name: name of profile being manipulated (NOT NULL)*@info: any extra

1022

如果old则

1023

share_name(old, new)

1024

__replace_profile - replace @old with @new on a list*@old: profile to be replaced (NOT NULL)*@new: profile to replace @old with (NOT NULL)*@share_proxy: transfer @old->proxy to @new* Will duplicate and refcount elements that @new inherits from @old

1025

否则

1028

如果cu_access_pointer() - fetch RCU pointer with no dereferencing*@p: The pointer to read* Return the value of the specified RCU-protected pointer, but omit the* lockdep checks for being in an RCU read-side critical section(parent)则

1031

parent等于Update to newest version of parent after previous replacements* Returns: unrefcount newest version of parent

1032

lh等于profiles

1033

否则lh等于profiles

1035

__add_profile - add a profiles to list and label tree*@list: list to add it to (NOT NULL)*@profile: the profile to add (NOT NULL)* refcount @profile, should be put by __list_remove_profile* Requires: namespace lock be held, or list not be shared

1037

skip :

1038

aa_load_ent_free(ent)

1040

__aa_labelset_update_subtree(ns)

1041

mutex_unlock - release the mutex*@lock: the mutex to be released* Unlock a mutex that has been locked by this task previously.* This function must not be used in interrupt context. Unlocking* of a not locked mutex is not allowed.

1043

out :

1044

aa_put_ns - decrement refcount on @ns*@ns: namespace to put reference of* Decrement reference count of @ns and if no longer in use free it

1045

aa_put_loaddata(udata)

1046

1048

如果error则返回:error

1050

返回:he original size of the payload

1052

1053

mutex_unlock - release the mutex*@lock: the mutex to be released* Unlock a mutex that has been locked by this task previously.* This function must not be used in interrupt context. Unlocking* of a not locked mutex is not allowed.

1056

op等于如果ent且非old则OP_PROF_LOAD否则OP_PROF_REPL

1057

fail :

1058

audit_policy - Do auditing of policy changes*@label: label to check if it can manage policy*@op: policy operation being performed*@ns_name: name of namespace being manipulated*@name: name of profile being manipulated (NOT NULL)*@info: any extra

1061

info等于"valid profile in failed atomic policy load"

1063

如果tmp恒等于ent则

1064

info等于"unchecked profile in failed atomic policy load"

1066

继续下一循环

1068

op等于如果非old则OP_PROF_LOAD否则OP_PROF_REPL

1069

audit_policy - Do auditing of policy changes*@label: label to check if it can manage policy*@op: policy operation being performed*@ns_name: name of namespace being manipulated*@name: name of profile being manipulated (NOT NULL)*@info: any extra

1073

删除链表项并重新初始化

1074

aa_load_ent_free(ent)

1077

转到:out

**调用者**
名称	描述
policy_update

源代码转换工具开放的插件接口	X
支持：c/c++/esqlc/java Oracle/Informix/Mysql 插件可实现：逻辑报告代码生成和批量转换代码