Linux Kernel  3.7.1
 All Data Structures Namespaces Files Functions Variables Typedefs Enumerations Enumerator Macros Groups Pages
Macros | Functions
security.c File Reference
#include <linux/capability.h>
#include <linux/module.h>
#include <linux/init.h>
#include <linux/kernel.h>
#include <linux/security.h>
#include <linux/integrity.h>
#include <linux/ima.h>
#include <linux/evm.h>
#include <linux/fsnotify.h>
#include <linux/mman.h>
#include <linux/mount.h>
#include <linux/personality.h>
#include <linux/backing-dev.h>
#include <net/flow.h>

Go to the source code of this file.

Macros

#define MAX_LSM_EVM_XATTR   2
 

Functions

int __init security_init (void)
 
void reset_security_ops (void)
 
 __setup ("security=", choose_lsm)
 
int __init security_module_enable (struct security_operations *ops)
 
int __init register_security (struct security_operations *ops)
 
int security_ptrace_access_check (struct task_struct *child, unsigned int mode)
 
int security_ptrace_traceme (struct task_struct *parent)
 
int security_capget (struct task_struct *target, kernel_cap_t *effective, kernel_cap_t *inheritable, kernel_cap_t *permitted)
 
int security_capset (struct cred *new, const struct cred *old, const kernel_cap_t *effective, const kernel_cap_t *inheritable, const kernel_cap_t *permitted)
 
int security_capable (const struct cred *cred, struct user_namespace *ns, int cap)
 
int security_capable_noaudit (const struct cred *cred, struct user_namespace *ns, int cap)
 
int security_quotactl (int cmds, int type, int id, struct super_block *sb)
 
int security_quota_on (struct dentry *dentry)
 
int security_syslog (int type)
 
int security_settime (const struct timespec *ts, const struct timezone *tz)
 
int security_vm_enough_memory_mm (struct mm_struct *mm, long pages)
 
int security_bprm_set_creds (struct linux_binprm *bprm)
 
int security_bprm_check (struct linux_binprm *bprm)
 
void security_bprm_committing_creds (struct linux_binprm *bprm)
 
void security_bprm_committed_creds (struct linux_binprm *bprm)
 
int security_bprm_secureexec (struct linux_binprm *bprm)
 
int security_sb_alloc (struct super_block *sb)
 
void security_sb_free (struct super_block *sb)
 
int security_sb_copy_data (char *orig, char *copy)
 
 EXPORT_SYMBOL (security_sb_copy_data)
 
int security_sb_remount (struct super_block *sb, void *data)
 
int security_sb_kern_mount (struct super_block *sb, int flags, void *data)
 
int security_sb_show_options (struct seq_file *m, struct super_block *sb)
 
int security_sb_statfs (struct dentry *dentry)
 
int security_sb_mount (const char *dev_name, struct path *path, const char *type, unsigned long flags, void *data)
 
int security_sb_umount (struct vfsmount *mnt, int flags)
 
int security_sb_pivotroot (struct path *old_path, struct path *new_path)
 
int security_sb_set_mnt_opts (struct super_block *sb, struct security_mnt_opts *opts)
 
 EXPORT_SYMBOL (security_sb_set_mnt_opts)
 
void security_sb_clone_mnt_opts (const struct super_block *oldsb, struct super_block *newsb)
 
 EXPORT_SYMBOL (security_sb_clone_mnt_opts)
 
int security_sb_parse_opts_str (char *options, struct security_mnt_opts *opts)
 
 EXPORT_SYMBOL (security_sb_parse_opts_str)
 
int security_inode_alloc (struct inode *inode)
 
void security_inode_free (struct inode *inode)
 
int security_inode_init_security (struct inode *inode, struct inode *dir, const struct qstr *qstr, const initxattrs initxattrs, void *fs_data)
 
 EXPORT_SYMBOL (security_inode_init_security)
 
int security_old_inode_init_security (struct inode *inode, struct inode *dir, const struct qstr *qstr, char **name, void **value, size_t *len)
 
 EXPORT_SYMBOL (security_old_inode_init_security)
 
int security_inode_create (struct inode *dir, struct dentry *dentry, umode_t mode)
 
 EXPORT_SYMBOL_GPL (security_inode_create)
 
int security_inode_link (struct dentry *old_dentry, struct inode *dir, struct dentry *new_dentry)
 
int security_inode_unlink (struct inode *dir, struct dentry *dentry)
 
int security_inode_symlink (struct inode *dir, struct dentry *dentry, const char *old_name)
 
int security_inode_mkdir (struct inode *dir, struct dentry *dentry, umode_t mode)
 
 EXPORT_SYMBOL_GPL (security_inode_mkdir)
 
int security_inode_rmdir (struct inode *dir, struct dentry *dentry)
 
int security_inode_mknod (struct inode *dir, struct dentry *dentry, umode_t mode, dev_t dev)
 
int security_inode_rename (struct inode *old_dir, struct dentry *old_dentry, struct inode *new_dir, struct dentry *new_dentry)
 
int security_inode_readlink (struct dentry *dentry)
 
int security_inode_follow_link (struct dentry *dentry, struct nameidata *nd)
 
int security_inode_permission (struct inode *inode, int mask)
 
int security_inode_setattr (struct dentry *dentry, struct iattr *attr)
 
 EXPORT_SYMBOL_GPL (security_inode_setattr)
 
int security_inode_getattr (struct vfsmount *mnt, struct dentry *dentry)
 
int security_inode_setxattr (struct dentry *dentry, const char *name, const void *value, size_t size, int flags)
 
void security_inode_post_setxattr (struct dentry *dentry, const char *name, const void *value, size_t size, int flags)
 
int security_inode_getxattr (struct dentry *dentry, const char *name)
 
int security_inode_listxattr (struct dentry *dentry)
 
int security_inode_removexattr (struct dentry *dentry, const char *name)
 
int security_inode_need_killpriv (struct dentry *dentry)
 
int security_inode_killpriv (struct dentry *dentry)
 
int security_inode_getsecurity (const struct inode *inode, const char *name, void **buffer, bool alloc)
 
int security_inode_setsecurity (struct inode *inode, const char *name, const void *value, size_t size, int flags)
 
int security_inode_listsecurity (struct inode *inode, char *buffer, size_t buffer_size)
 
void security_inode_getsecid (const struct inode *inode, u32 *secid)
 
int security_file_permission (struct file *file, int mask)
 
int security_file_alloc (struct file *file)
 
void security_file_free (struct file *file)
 
int security_file_ioctl (struct file *file, unsigned int cmd, unsigned long arg)
 
int security_mmap_file (struct file *file, unsigned long prot, unsigned long flags)
 
int security_mmap_addr (unsigned long addr)
 
int security_file_mprotect (struct vm_area_struct *vma, unsigned long reqprot, unsigned long prot)
 
int security_file_lock (struct file *file, unsigned int cmd)
 
int security_file_fcntl (struct file *file, unsigned int cmd, unsigned long arg)
 
int security_file_set_fowner (struct file *file)
 
int security_file_send_sigiotask (struct task_struct *tsk, struct fown_struct *fown, int sig)
 
int security_file_receive (struct file *file)
 
int security_file_open (struct file *file, const struct cred *cred)
 
int security_task_create (unsigned long clone_flags)
 
void security_task_free (struct task_struct *task)
 
int security_cred_alloc_blank (struct cred *cred, gfp_t gfp)
 
void security_cred_free (struct cred *cred)
 
int security_prepare_creds (struct cred *new, const struct cred *old, gfp_t gfp)
 
void security_transfer_creds (struct cred *new, const struct cred *old)
 
int security_kernel_act_as (struct cred *new, u32 secid)
 
int security_kernel_create_files_as (struct cred *new, struct inode *inode)
 
int security_kernel_module_request (char *kmod_name)
 
int security_task_fix_setuid (struct cred *new, const struct cred *old, int flags)
 
int security_task_setpgid (struct task_struct *p, pid_t pgid)
 
int security_task_getpgid (struct task_struct *p)
 
int security_task_getsid (struct task_struct *p)
 
void security_task_getsecid (struct task_struct *p, u32 *secid)
 
 EXPORT_SYMBOL (security_task_getsecid)
 
int security_task_setnice (struct task_struct *p, int nice)
 
int security_task_setioprio (struct task_struct *p, int ioprio)
 
int security_task_getioprio (struct task_struct *p)
 
int security_task_setrlimit (struct task_struct *p, unsigned int resource, struct rlimit *new_rlim)
 
int security_task_setscheduler (struct task_struct *p)
 
int security_task_getscheduler (struct task_struct *p)
 
int security_task_movememory (struct task_struct *p)
 
int security_task_kill (struct task_struct *p, struct siginfo *info, int sig, u32 secid)
 
int security_task_wait (struct task_struct *p)
 
int security_task_prctl (int option, unsigned long arg2, unsigned long arg3, unsigned long arg4, unsigned long arg5)
 
void security_task_to_inode (struct task_struct *p, struct inode *inode)
 
int security_ipc_permission (struct kern_ipc_perm *ipcp, short flag)
 
void security_ipc_getsecid (struct kern_ipc_perm *ipcp, u32 *secid)
 
int security_msg_msg_alloc (struct msg_msg *msg)
 
void security_msg_msg_free (struct msg_msg *msg)
 
int security_msg_queue_alloc (struct msg_queue *msq)
 
void security_msg_queue_free (struct msg_queue *msq)
 
int security_msg_queue_associate (struct msg_queue *msq, int msqflg)
 
int security_msg_queue_msgctl (struct msg_queue *msq, int cmd)
 
int security_msg_queue_msgsnd (struct msg_queue *msq, struct msg_msg *msg, int msqflg)
 
int security_msg_queue_msgrcv (struct msg_queue *msq, struct msg_msg *msg, struct task_struct *target, long type, int mode)
 
int security_shm_alloc (struct shmid_kernel *shp)
 
void security_shm_free (struct shmid_kernel *shp)
 
int security_shm_associate (struct shmid_kernel *shp, int shmflg)
 
int security_shm_shmctl (struct shmid_kernel *shp, int cmd)
 
int security_shm_shmat (struct shmid_kernel *shp, char __user *shmaddr, int shmflg)
 
int security_sem_alloc (struct sem_array *sma)
 
void security_sem_free (struct sem_array *sma)
 
int security_sem_associate (struct sem_array *sma, int semflg)
 
int security_sem_semctl (struct sem_array *sma, int cmd)
 
int security_sem_semop (struct sem_array *sma, struct sembuf *sops, unsigned nsops, int alter)
 
void security_d_instantiate (struct dentry *dentry, struct inode *inode)
 
 EXPORT_SYMBOL (security_d_instantiate)
 
int security_getprocattr (struct task_struct *p, char *name, char **value)
 
int security_setprocattr (struct task_struct *p, char *name, void *value, size_t size)
 
int security_netlink_send (struct sock *sk, struct sk_buff *skb)
 
int security_secid_to_secctx (u32 secid, char **secdata, u32 *seclen)
 
 EXPORT_SYMBOL (security_secid_to_secctx)
 
int security_secctx_to_secid (const char *secdata, u32 seclen, u32 *secid)
 
 EXPORT_SYMBOL (security_secctx_to_secid)
 
void security_release_secctx (char *secdata, u32 seclen)
 
 EXPORT_SYMBOL (security_release_secctx)
 
int security_inode_notifysecctx (struct inode *inode, void *ctx, u32 ctxlen)
 
 EXPORT_SYMBOL (security_inode_notifysecctx)
 
int security_inode_setsecctx (struct dentry *dentry, void *ctx, u32 ctxlen)
 
 EXPORT_SYMBOL (security_inode_setsecctx)
 
int security_inode_getsecctx (struct inode *inode, void **ctx, u32 *ctxlen)
 
 EXPORT_SYMBOL (security_inode_getsecctx)
 

Macro Definition Documentation

#define MAX_LSM_EVM_XATTR   2

Definition at line 29 of file security.c.

Function Documentation

__setup ( )
EXPORT_SYMBOL ( security_sb_copy_data  )
EXPORT_SYMBOL ( security_sb_set_mnt_opts  )
EXPORT_SYMBOL ( security_sb_clone_mnt_opts  )
EXPORT_SYMBOL ( security_sb_parse_opts_str  )
EXPORT_SYMBOL ( security_inode_init_security  )
EXPORT_SYMBOL ( security_old_inode_init_security  )
EXPORT_SYMBOL ( security_task_getsecid  )
EXPORT_SYMBOL ( security_d_instantiate  )
EXPORT_SYMBOL ( security_secid_to_secctx  )
EXPORT_SYMBOL ( security_secctx_to_secid  )
EXPORT_SYMBOL ( security_release_secctx  )
EXPORT_SYMBOL ( security_inode_notifysecctx  )
EXPORT_SYMBOL ( security_inode_setsecctx  )
EXPORT_SYMBOL ( security_inode_getsecctx  )
EXPORT_SYMBOL_GPL ( security_inode_create  )
EXPORT_SYMBOL_GPL ( security_inode_mkdir  )
EXPORT_SYMBOL_GPL ( security_inode_setattr  )
int __init register_security ( struct security_operations *  ops)

register_security - registers a security framework with the kernel : a pointer to the struct security_options that is to be registered

This function allows a security module to register itself with the kernel security subsystem. Some rudimentary checking is done on the value passed to this function. You'll need to check first if your LSM is allowed to register its by calling security_module_enable().

If there is already a security module registered with the kernel, an error will be returned. Otherwise %0 is returned on success.

Definition at line 119 of file security.c.

void reset_security_ops ( void  )

Definition at line 75 of file security.c.

int security_bprm_check ( struct linux_binprm bprm)

Definition at line 218 of file security.c.

void security_bprm_committed_creds ( struct linux_binprm bprm)

Definition at line 233 of file security.c.

void security_bprm_committing_creds ( struct linux_binprm bprm)

Definition at line 228 of file security.c.

int security_bprm_secureexec ( struct linux_binprm bprm)

Definition at line 238 of file security.c.

int security_bprm_set_creds ( struct linux_binprm bprm)

Definition at line 213 of file security.c.

int security_capable ( const struct cred cred,
struct user_namespace ns,
int  cap 
)

Definition at line 176 of file security.c.

int security_capable_noaudit ( const struct cred cred,
struct user_namespace ns,
int  cap 
)

Definition at line 182 of file security.c.

int security_capget ( struct task_struct target,
kernel_cap_t effective,
kernel_cap_t inheritable,
kernel_cap_t permitted 
)

Definition at line 159 of file security.c.

int security_capset ( struct cred new,
const struct cred old,
const kernel_cap_t effective,
const kernel_cap_t inheritable,
const kernel_cap_t permitted 
)

Definition at line 167 of file security.c.

int security_cred_alloc_blank ( struct cred cred,
gfp_t  gfp 
)

Definition at line 788 of file security.c.

void security_cred_free ( struct cred cred)

Definition at line 793 of file security.c.

void security_d_instantiate ( struct dentry dentry,
struct inode inode 
)

Definition at line 1017 of file security.c.

int security_file_alloc ( struct file file)

Definition at line 667 of file security.c.

int security_file_fcntl ( struct file file,
unsigned int  cmd,
unsigned long  arg 
)

Definition at line 743 of file security.c.

void security_file_free ( struct file file)

Definition at line 672 of file security.c.

int security_file_ioctl ( struct file file,
unsigned int  cmd,
unsigned long  arg 
)

Definition at line 677 of file security.c.

int security_file_lock ( struct file file,
unsigned int  cmd 
)

Definition at line 738 of file security.c.

int security_file_mprotect ( struct vm_area_struct vma,
unsigned long  reqprot,
unsigned long  prot 
)

Definition at line 732 of file security.c.

int security_file_open ( struct file file,
const struct cred cred 
)

Definition at line 764 of file security.c.

int security_file_permission ( struct file file,
int  mask 
)

Definition at line 656 of file security.c.

int security_file_receive ( struct file file)

Definition at line 759 of file security.c.

int security_file_send_sigiotask ( struct task_struct tsk,
struct fown_struct fown,
int  sig 
)

Definition at line 753 of file security.c.

int security_file_set_fowner ( struct file file)

Definition at line 748 of file security.c.

int security_getprocattr ( struct task_struct p,
char name,
char **  value 
)

Definition at line 1025 of file security.c.

int __init security_init ( void  )

security_init - initializes the security framework

This should be called early in the kernel initialization sequence.

Definition at line 64 of file security.c.

int security_inode_alloc ( struct inode inode)

Definition at line 315 of file security.c.

int security_inode_create ( struct inode dir,
struct dentry dentry,
umode_t  mode 
)

Definition at line 462 of file security.c.

int security_inode_follow_link ( struct dentry dentry,
struct nameidata nd 
)

Definition at line 532 of file security.c.

void security_inode_free ( struct inode inode)

Definition at line 321 of file security.c.

int security_inode_getattr ( struct vfsmount mnt,
struct dentry dentry 
)

Definition at line 559 of file security.c.

int security_inode_getsecctx ( struct inode inode,
void **  ctx,
u32 ctxlen 
)

Definition at line 1070 of file security.c.

void security_inode_getsecid ( const struct inode inode,
u32 secid 
)

Definition at line 651 of file security.c.

int security_inode_getsecurity ( const struct inode inode,
const char name,
void **  buffer,
bool  alloc 
)

Definition at line 630 of file security.c.

int security_inode_getxattr ( struct dentry dentry,
const char name 
)

Definition at line 591 of file security.c.

int security_inode_init_security ( struct inode inode,
struct inode dir,
const struct qstr qstr,
const initxattrs  initxattrs,
void fs_data 
)

Definition at line 327 of file security.c.

int security_inode_killpriv ( struct dentry dentry)

Definition at line 625 of file security.c.

int security_inode_link ( struct dentry old_dentry,
struct inode dir,
struct dentry new_dentry 
)

Definition at line 470 of file security.c.

int security_inode_listsecurity ( struct inode inode,
char buffer,
size_t  buffer_size 
)

Definition at line 644 of file security.c.

int security_inode_listxattr ( struct dentry dentry)

Definition at line 598 of file security.c.

int security_inode_mkdir ( struct inode dir,
struct dentry dentry,
umode_t  mode 
)

Definition at line 493 of file security.c.

int security_inode_mknod ( struct inode dir,
struct dentry dentry,
umode_t  mode,
dev_t  dev 
)

Definition at line 508 of file security.c.

int security_inode_need_killpriv ( struct dentry dentry)

Definition at line 620 of file security.c.

int security_inode_notifysecctx ( struct inode inode,
void ctx,
u32  ctxlen 
)

Definition at line 1058 of file security.c.

int security_inode_permission ( struct inode inode,
int  mask 
)

Definition at line 539 of file security.c.

void security_inode_post_setxattr ( struct dentry dentry,
const char name,
const void value,
size_t  size,
int  flags 
)

Definition at line 582 of file security.c.

int security_inode_readlink ( struct dentry dentry)

Definition at line 525 of file security.c.

int security_inode_removexattr ( struct dentry dentry,
const char name 
)

Definition at line 605 of file security.c.

int security_inode_rename ( struct inode old_dir,
struct dentry old_dentry,
struct inode new_dir,
struct dentry new_dentry 
)

Definition at line 515 of file security.c.

int security_inode_rmdir ( struct inode dir,
struct dentry dentry 
)

Definition at line 501 of file security.c.

int security_inode_setattr ( struct dentry dentry,
struct iattr attr 
)

Definition at line 546 of file security.c.

int security_inode_setsecctx ( struct dentry dentry,
void ctx,
u32  ctxlen 
)

Definition at line 1064 of file security.c.

int security_inode_setsecurity ( struct inode inode,
const char name,
const void value,
size_t  size,
int  flags 
)

Definition at line 637 of file security.c.

int security_inode_setxattr ( struct dentry dentry,
const char name,
const void value,
size_t  size,
int  flags 
)

Definition at line 566 of file security.c.

int security_inode_symlink ( struct inode dir,
struct dentry dentry,
const char old_name 
)

Definition at line 485 of file security.c.

int security_inode_unlink ( struct inode dir,
struct dentry dentry 
)

Definition at line 478 of file security.c.

void security_ipc_getsecid ( struct kern_ipc_perm ipcp,
u32 secid 
)

Definition at line 919 of file security.c.

int security_ipc_permission ( struct kern_ipc_perm ipcp,
short  flag 
)

Definition at line 914 of file security.c.

int security_kernel_act_as ( struct cred new,
u32  secid 
)

Definition at line 808 of file security.c.

int security_kernel_create_files_as ( struct cred new,
struct inode inode 
)

Definition at line 813 of file security.c.

int security_kernel_module_request ( char kmod_name)

Definition at line 818 of file security.c.

int security_mmap_addr ( unsigned long  addr)

Definition at line 727 of file security.c.

int security_mmap_file ( struct file file,
unsigned long  prot,
unsigned long  flags 
)

Definition at line 716 of file security.c.

int __init security_module_enable ( struct security_operations *  ops)

security_module_enable - Load given security module on boot ? : a pointer to the struct security_operations that is to be checked.

Each LSM must pass this method before registering its own operations to avoid security registration races. This method may also be used to check if your LSM is currently loaded during kernel initialization.

Return true if: -The passed LSM is the one chosen by user at boot time, -or the passed LSM is configured as the default and the user did not choose an alternate LSM at boot time. Otherwise, return false.

Definition at line 102 of file security.c.

int security_msg_msg_alloc ( struct msg_msg msg)

Definition at line 924 of file security.c.

void security_msg_msg_free ( struct msg_msg msg)

Definition at line 929 of file security.c.

int security_msg_queue_alloc ( struct msg_queue msq)

Definition at line 934 of file security.c.

int security_msg_queue_associate ( struct msg_queue msq,
int  msqflg 
)

Definition at line 944 of file security.c.

void security_msg_queue_free ( struct msg_queue msq)

Definition at line 939 of file security.c.

int security_msg_queue_msgctl ( struct msg_queue msq,
int  cmd 
)

Definition at line 949 of file security.c.

int security_msg_queue_msgrcv ( struct msg_queue msq,
struct msg_msg msg,
struct task_struct target,
long  type,
int  mode 
)

Definition at line 960 of file security.c.

int security_msg_queue_msgsnd ( struct msg_queue msq,
struct msg_msg msg,
int  msqflg 
)

Definition at line 954 of file security.c.

int security_netlink_send ( struct sock sk,
struct sk_buff skb 
)

Definition at line 1035 of file security.c.

int security_old_inode_init_security ( struct inode inode,
struct inode dir,
const struct qstr qstr,
char **  name,
void **  value,
size_t len 
)

Definition at line 364 of file security.c.

int security_prepare_creds ( struct cred new,
const struct cred old,
gfp_t  gfp 
)

Definition at line 798 of file security.c.

int security_ptrace_access_check ( struct task_struct child,
unsigned int  mode 
)

Definition at line 137 of file security.c.

int security_ptrace_traceme ( struct task_struct parent)

Definition at line 148 of file security.c.

int security_quota_on ( struct dentry dentry)

Definition at line 193 of file security.c.

int security_quotactl ( int  cmds,
int  type,
int  id,
struct super_block sb 
)

Definition at line 188 of file security.c.

void security_release_secctx ( char secdata,
u32  seclen 
)

Definition at line 1052 of file security.c.

int security_sb_alloc ( struct super_block sb)

Definition at line 243 of file security.c.

void security_sb_clone_mnt_opts ( const struct super_block oldsb,
struct super_block newsb 
)

Definition at line 302 of file security.c.

int security_sb_copy_data ( char orig,
char copy 
)

Definition at line 253 of file security.c.

void security_sb_free ( struct super_block sb)

Definition at line 248 of file security.c.

int security_sb_kern_mount ( struct super_block sb,
int  flags,
void data 
)

Definition at line 264 of file security.c.

int security_sb_mount ( const char dev_name,
struct path path,
const char type,
unsigned long  flags,
void data 
)

Definition at line 279 of file security.c.

int security_sb_parse_opts_str ( char options,
struct security_mnt_opts opts 
)

Definition at line 309 of file security.c.

int security_sb_pivotroot ( struct path old_path,
struct path new_path 
)

Definition at line 290 of file security.c.

int security_sb_remount ( struct super_block sb,
void data 
)

Definition at line 259 of file security.c.

int security_sb_set_mnt_opts ( struct super_block sb,
struct security_mnt_opts opts 
)

Definition at line 295 of file security.c.

int security_sb_show_options ( struct seq_file m,
struct super_block sb 
)

Definition at line 269 of file security.c.

int security_sb_statfs ( struct dentry dentry)

Definition at line 274 of file security.c.

int security_sb_umount ( struct vfsmount mnt,
int  flags 
)

Definition at line 285 of file security.c.

int security_secctx_to_secid ( const char secdata,
u32  seclen,
u32 secid 
)

Definition at line 1046 of file security.c.

int security_secid_to_secctx ( u32  secid,
char **  secdata,
u32 seclen 
)

Definition at line 1040 of file security.c.

int security_sem_alloc ( struct sem_array sma)

Definition at line 991 of file security.c.

int security_sem_associate ( struct sem_array sma,
int  semflg 
)

Definition at line 1001 of file security.c.

void security_sem_free ( struct sem_array sma)

Definition at line 996 of file security.c.

int security_sem_semctl ( struct sem_array sma,
int  cmd 
)

Definition at line 1006 of file security.c.

int security_sem_semop ( struct sem_array sma,
struct sembuf sops,
unsigned  nsops,
int  alter 
)

Definition at line 1011 of file security.c.

int security_setprocattr ( struct task_struct p,
char name,
void value,
size_t  size 
)

Definition at line 1030 of file security.c.

int security_settime ( const struct timespec ts,
const struct timezone tz 
)

Definition at line 203 of file security.c.

int security_shm_alloc ( struct shmid_kernel shp)

Definition at line 966 of file security.c.

int security_shm_associate ( struct shmid_kernel shp,
int  shmflg 
)

Definition at line 976 of file security.c.

void security_shm_free ( struct shmid_kernel shp)

Definition at line 971 of file security.c.

int security_shm_shmat ( struct shmid_kernel shp,
char __user shmaddr,
int  shmflg 
)

Definition at line 986 of file security.c.

int security_shm_shmctl ( struct shmid_kernel shp,
int  cmd 
)

Definition at line 981 of file security.c.

int security_syslog ( int  type)

Definition at line 198 of file security.c.

int security_task_create ( unsigned long  clone_flags)

Definition at line 775 of file security.c.

int security_task_fix_setuid ( struct cred new,
const struct cred old,
int  flags 
)

Definition at line 823 of file security.c.

void security_task_free ( struct task_struct task)

Definition at line 780 of file security.c.

int security_task_getioprio ( struct task_struct p)

Definition at line 860 of file security.c.

int security_task_getpgid ( struct task_struct p)

Definition at line 834 of file security.c.

int security_task_getscheduler ( struct task_struct p)

Definition at line 876 of file security.c.

void security_task_getsecid ( struct task_struct p,
u32 secid 
)

Definition at line 844 of file security.c.

int security_task_getsid ( struct task_struct p)

Definition at line 839 of file security.c.

int security_task_kill ( struct task_struct p,
struct siginfo info,
int  sig,
u32  secid 
)

Definition at line 886 of file security.c.

int security_task_movememory ( struct task_struct p)

Definition at line 881 of file security.c.

int security_task_prctl ( int  option,
unsigned long  arg2,
unsigned long  arg3,
unsigned long  arg4,
unsigned long  arg5 
)

Definition at line 897 of file security.c.

int security_task_setioprio ( struct task_struct p,
int  ioprio 
)

Definition at line 855 of file security.c.

int security_task_setnice ( struct task_struct p,
int  nice 
)

Definition at line 850 of file security.c.

int security_task_setpgid ( struct task_struct p,
pid_t  pgid 
)

Definition at line 829 of file security.c.

int security_task_setrlimit ( struct task_struct p,
unsigned int  resource,
struct rlimit new_rlim 
)

Definition at line 865 of file security.c.

int security_task_setscheduler ( struct task_struct p)

Definition at line 871 of file security.c.

void security_task_to_inode ( struct task_struct p,
struct inode inode 
)

Definition at line 909 of file security.c.

int security_task_wait ( struct task_struct p)

Definition at line 892 of file security.c.

void security_transfer_creds ( struct cred new,
const struct cred old 
)

Definition at line 803 of file security.c.

int security_vm_enough_memory_mm ( struct mm_struct mm,
long  pages 
)

Definition at line 208 of file security.c.