函数逻辑报告

Linux Kernel

v5.5.9

Brick Technologies Co., Ltd

Source Code:security\apparmor\policy.c Create Date:2022-07-27 21:33:14
Last Modify:2020-03-12 14:18:49 Copyright©Brick
首页 函数Tree
注解内核,赢得工具下载SCCTEnglish

函数名称：policy_admin_capable

函数原型：bool policy_admin_capable(struct aa_ns *ns)

返回类型：bool

参数：

类型参数名称
struct aa_ns *ns
664  user_ns等于current_user_ns()
665  capable等于ns_capable(user_ns, Allow MAC configuration or state changes)
667  AA_DEBUG("cap_mac_admin? %d\n", capable)
668  AA_DEBUG("policy locked? %d\n", aa_g_lock_policy)
670  返回:policy_view_capable - check if viewing policy in at @ns is allowed* Returns: true if viewing policy is allowed* If @ns is NULL then the namespace being viewed is assumed to be the* tasks current namespace.且capable且非aa_g_lock_policy
调用者
名称描述
aa_may_manage_policyaa_may_manage_policy - can the current task manage policy*@label: label to check if it can manage policy*@op: the policy manipulation operation being done* Returns: 0 if the task is allowed to manipulate policy else error
param_set_aalockpolicy
param_set_aaboolAppArmor sysfs module parameters
param_set_audit
param_set_mode
apparmor_dointvec