Function report

Linux Kernel

v5.5.9

Brick Technologies Co., Ltd

Source Code:security\apparmor\policy.c Create Date:2022-07-28 19:52:01
Last Modify:2020-03-12 14:18:49 Copyright©Brick
home page Tree
Annotation kernel can get tool activityDownload SCCTChinese

Name:policy_admin_capable

Proto:bool policy_admin_capable(struct aa_ns *ns)

Type:bool

Parameter:

TypeParameterName
struct aa_ns *ns
664  user_ns = current_user_ns()
665  capable = ns_capable(user_ns, Allow MAC configuration or state changes)
667  AA_DEBUG("cap_mac_admin? %d\n", capable)
668  AA_DEBUG("policy locked? %d\n", aa_g_lock_policy)
670  Return policy_view_capable - check if viewing policy in at @ns is allowed* Returns: true if viewing policy is allowed* If @ns is NULL then the namespace being viewed is assumed to be the* tasks current namespace. && capable && Not aa_g_lock_policy
Caller
NameDescribe
aa_may_manage_policyaa_may_manage_policy - can the current task manage policy*@label: label to check if it can manage policy*@op: the policy manipulation operation being done* Returns: 0 if the task is allowed to manipulate policy else error
param_set_aalockpolicy
param_set_aaboolAppArmor sysfs module parameters
param_set_audit
param_set_mode
apparmor_dointvec