Function report

Linux Kernel

v5.5.9

Brick Technologies Co., Ltd

Source Code:security\selinux\xfrm.c Create Date:2022-07-28 19:16:57
Last Modify:2020-03-12 14:18:49 Copyright©Brick
home page Tree
Annotation kernel can get tool activityDownload SCCTChinese

Name:POSTROUTE_LAST hook's XFRM processing:* If we have no security association, then we need to determine* whether the socket is allowed to send to an unlabelled destination.* If we do have a authorizable security association, then it has already been

Proto:int selinux_xfrm_postroute_last(unsigned int sk_sid, struct sk_buff *skb, struct common_audit_data *ad, u8 proto)

Type:int

Parameter:

TypeParameterName
unsigned intsk_sid
struct sk_buff *skb
struct common_audit_data *ad
u8proto
444  Case proto == IPPROTO_AH
445  Case proto == IPPROTO_ESP
446  Case proto == IPPROTO_COMP
450  Return 0
451  Default
452  Break
455  dst = skb_dst - returns skb dst_entry*@skb: buffer* Returns skb dst_entry, regardless of reference taken or not.
456  If dst Then
459  When iter != NULL cycle
460  x = xfrm
470  Return avc_has_perm - Check permissions and perform any appropriate auditing