Function report

Linux Kernel

v5.5.9

Brick Technologies Co., Ltd

Source Code:security\selinux\xfrm.c Create Date:2022-07-28 19:16:54
Last Modify:2020-03-12 14:18:49 Copyright©Brick
home page Tree
Annotation kernel can get tool activityDownload SCCTChinese

Name:LSM hook that controls access to unlabelled packets. If* a xfrm_state is authorizable (defined by macro) then it was* already authorized by the IPSec process. If not, then* we need to check for unlabelled access since this may not have

Proto:int selinux_xfrm_sock_rcv_skb(unsigned int sk_sid, struct sk_buff *skb, struct common_audit_data *ad)

Type:int

Parameter:

TypeParameterName
unsigned intsk_sid
struct sk_buff *skb
struct common_audit_data *ad
408  sp = skb_sec_path(skb)
409  peer_sid = SECINITSID_UNLABELED
411  If sp Then
412  When i < len cycle
413  x = xvec[i]
415  If x && Returns true if the xfrm contains a security blob for SELinux. Then
416  ctx = Security context
417  peer_sid = ctx_sid
418  Break
426  Return avc_has_perm - Check permissions and perform any appropriate auditing
Caller
NameDescribe
selinux_sock_rcv_skb_compat