domain.h File Reference

#include <linux/binfmts.h>
#include <linux/types.h>

Go to the source code of this file.

Data Structures
struct	aa_domain

Functions
int	apparmor_bprm_set_creds (struct linux_binprm *bprm)
int	apparmor_bprm_secureexec (struct linux_binprm *bprm)
void	apparmor_bprm_committing_creds (struct linux_binprm *bprm)
void	apparmor_bprm_committed_creds (struct linux_binprm *bprm)
void	aa_free_domain_entries (struct aa_domain *domain)
int	aa_change_hat (const char *hats[], int count, u64 token, bool permtest)
int	aa_change_profile (const char *ns_name, const char *name, bool onexec, bool permtest)

Function Documentation

int aa_change_hat	(	const char *	hats[],
		int	count,
		u64	token,
		bool	permtest
	)

aa_change_hat - change hat to/from subprofile : vector of hat names to try changing into (MAYBE NULL if == 0) : number of hat names in : magic value to validate the hat change : true if this is just a permission test

Change to the first profile specified in that exists, and store the in the current task context. If the count == 0 and the matches that stored in the current task context, return to the top level profile.

Returns %0 on success, error otherwise.

Definition at line 616 of file domain.c.

int aa_change_profile	(	const char *	ns_name,
		const char *	name,
		bool	onexec,
		bool	permtest
	)

Definition at line 749 of file domain.c.

void aa_free_domain_entries

(

struct aa_domain *

domain

)

aa_free_domain_entries - free entries in a domain table : the domain table to free (MAYBE NULL)

Definition at line 37 of file domain.c.

void apparmor_bprm_committed_creds

(

struct linux_binprm *

bprm

)

apparmor_bprm_commited_cred - do cleanup after new creds committed : binprm for the exec (NOT NULL)

Definition at line 577 of file domain.c.

void apparmor_bprm_committing_creds

(

struct linux_binprm *

bprm

)

apparmor_bprm_committing_creds - do task cleanup on committing new creds : binprm for the exec (NOT NULL)

Definition at line 557 of file domain.c.

int apparmor_bprm_secureexec

(

struct linux_binprm *

bprm

)

apparmor_bprm_secureexec - determine if secureexec is needed : binprm for exec (NOT NULL)

Returns: %1 if secureexec is needed else %0

Definition at line 540 of file domain.c.

int apparmor_bprm_set_creds

(

struct linux_binprm *

bprm

)

apparmor_bprm_set_creds - set the new creds on the bprm struct : binprm for the exec (NOT NULL)

Returns: %0 or error on failure

Definition at line 343 of file domain.c.