Function report

Linux Kernel

v5.5.9

Brick Technologies Co., Ltd

Source Code:security\device_cgroup.c Create Date:2022-07-28 19:55:50
Last Modify:2020-03-12 14:18:49 Copyright©Brick
home page Tree
Annotation kernel can get tool activityDownload SCCTChinese

Name:match_exception - iterates the exception list trying to find a complete match*@exceptions: list of exceptions*@type: device type (DEVCG_DEV_BLOCK or DEVCG_DEV_CHAR)*@major: device file major number, ~0 to match all*@minor: device file minor number, ~0 to

Proto:static bool match_exception(struct list_head *exceptions, short type, unsigned int major, unsigned int minor, short access)

Type:bool

Parameter:

TypeParameterName
struct list_head *exceptions
shorttype
unsigned intmajor
unsigned intminor
shortaccess
319  If type & DEVCG_DEV_BLOCK && Not (type & DEVCG_DEV_BLOCK) Then Continue
321  If type & DEVCG_DEV_CHAR && Not (type & DEVCG_DEV_CHAR) Then Continue
323  If major != ~0 && major != major Then Continue
325  If minor != ~0 && minor != minor Then Continue
328  If access & ~access Then Continue
330  Return true
332  Return false
Caller
NameDescribe
verify_new_exverify_new_ex - verifies if a new exception is allowed by parent cgroup's permissions*@dev_cgroup: dev cgroup to be tested against*@refex: new exception*@behavior: behavior of the exception's dev_cgroup* This is used to make sure a child cgroup won't have
__devcgroup_check_permission__devcgroup_check_permission - checks if an inode operation is permitted*@dev_cgroup: the dev cgroup to be tested against*@type: device type*@major: device major number*@minor: device minor number*@access: combination of DEVCG_ACC_WRITE, DEVCG_ACC_READ