函数逻辑报告

Linux Kernel

v5.5.9

Brick Technologies Co., Ltd

Source Code:security\integrity\ima\ima_appraise.c Create Date:2022-07-27 22:06:39
Last Modify:2020-03-12 14:18:49 Copyright©Brick
首页 函数Tree
注解内核,赢得工具下载SCCTEnglish

函数名称：ma_check_blacklist - determine if the binary is blacklisted.* Add the hash of the blacklisted binary to the measurement list, based* on policy.* Returns -EPERM if the hash is blacklisted.

函数原型：int ima_check_blacklist(struct integrity_iint_cache *iint, const struct modsig *modsig, int pcr)

返回类型：int

参数：

类型参数名称
struct integrity_iint_cache *iint
const struct modsig *modsig
intpcr
319  const u8 * digest = NULL
320  digestsize等于0
321  rc等于0
323  如果非flags按位与IMA_CHECK_BLACKLIST的值则返回:0
326  如果flags按位与IMA_MODSIG_ALLOWED且modsig则
327  ima_get_modsig_digest(modsig, & hash_algo, & digest, & digestsize)
329  rc等于is_binary_blacklisted(digest, digestsize)
330  如果rc恒等于负EPERM且flags按位与 action cache flags 则process_buffer_measurement - Measure the buffer to ima log
336  返回:rc
调用者
名称描述
process_measurement