函数逻辑报告

Linux Kernel

v5.5.9

Brick Technologies Co., Ltd

Source Code:security\integrity\ima\ima_policy.c Create Date:2022-07-27 22:03:08
Last Modify:2020-03-12 14:18:49 Copyright©Brick
首页 函数Tree
注解内核,赢得工具下载SCCTEnglish

函数名称：In addition to knowing that we need to appraise the file in general,* we need to differentiate between calling hooks, for hook specific rules.

函数原型：static int get_subaction(struct ima_rule_entry *rule, enum ima_hooks func)

返回类型：int

参数：

类型参数名称
struct ima_rule_entry *rule
enum ima_hooksfunc
455  如果非flags按位与lags definitions 的值则返回: subaction appraise cache flags
459  当:func恒等于MMAP_CHECK
460  返回:IMA_MMAP_APPRAISE
461  当:func恒等于BPRM_CHECK
462  返回:IMA_BPRM_APPRAISE
463  当:func恒等于CREDS_CHECK
464  返回:IMA_CREDS_APPRAISE
465  当:func恒等于FILE_CHECK
466  当:func恒等于POST_SETATTR
467  返回: subaction appraise cache flags
468  当:func == MODULE_CHECK...MAX_CHECK - 1
469  默认
470  返回:IMA_READ_APPRAISE
调用者
名称描述
ima_match_policyma_match_policy - decision based on LSM and other conditions*@inode: pointer to an inode for which the policy decision is being made*@cred: pointer to a credentials structure for which the policy decision is* being made*@secid: LSM secid of the task to be