Linux Kernel
3.7.1
|
#include <linux/capability.h>
#include <linux/module.h>
#include <linux/init.h>
#include <linux/kernel.h>
#include <linux/security.h>
#include <linux/integrity.h>
#include <linux/ima.h>
#include <linux/evm.h>
#include <linux/fsnotify.h>
#include <linux/mman.h>
#include <linux/mount.h>
#include <linux/personality.h>
#include <linux/backing-dev.h>
#include <net/flow.h>
Go to the source code of this file.
Macros | |
#define | MAX_LSM_EVM_XATTR 2 |
#define MAX_LSM_EVM_XATTR 2 |
Definition at line 29 of file security.c.
__setup | ( | ) |
EXPORT_SYMBOL | ( | security_sb_copy_data | ) |
EXPORT_SYMBOL | ( | security_sb_set_mnt_opts | ) |
EXPORT_SYMBOL | ( | security_sb_clone_mnt_opts | ) |
EXPORT_SYMBOL | ( | security_sb_parse_opts_str | ) |
EXPORT_SYMBOL | ( | security_inode_init_security | ) |
EXPORT_SYMBOL | ( | security_old_inode_init_security | ) |
EXPORT_SYMBOL | ( | security_task_getsecid | ) |
EXPORT_SYMBOL | ( | security_d_instantiate | ) |
EXPORT_SYMBOL | ( | security_secid_to_secctx | ) |
EXPORT_SYMBOL | ( | security_secctx_to_secid | ) |
EXPORT_SYMBOL | ( | security_release_secctx | ) |
EXPORT_SYMBOL | ( | security_inode_notifysecctx | ) |
EXPORT_SYMBOL | ( | security_inode_setsecctx | ) |
EXPORT_SYMBOL | ( | security_inode_getsecctx | ) |
EXPORT_SYMBOL_GPL | ( | security_inode_create | ) |
EXPORT_SYMBOL_GPL | ( | security_inode_mkdir | ) |
EXPORT_SYMBOL_GPL | ( | security_inode_setattr | ) |
register_security - registers a security framework with the kernel : a pointer to the struct security_options that is to be registered
This function allows a security module to register itself with the kernel security subsystem. Some rudimentary checking is done on the value passed to this function. You'll need to check first if your LSM is allowed to register its by calling security_module_enable().
If there is already a security module registered with the kernel, an error will be returned. Otherwise %0 is returned on success.
Definition at line 119 of file security.c.
Definition at line 75 of file security.c.
int security_bprm_check | ( | struct linux_binprm * | bprm | ) |
Definition at line 218 of file security.c.
void security_bprm_committed_creds | ( | struct linux_binprm * | bprm | ) |
Definition at line 233 of file security.c.
void security_bprm_committing_creds | ( | struct linux_binprm * | bprm | ) |
Definition at line 228 of file security.c.
int security_bprm_secureexec | ( | struct linux_binprm * | bprm | ) |
Definition at line 238 of file security.c.
int security_bprm_set_creds | ( | struct linux_binprm * | bprm | ) |
Definition at line 213 of file security.c.
Definition at line 176 of file security.c.
Definition at line 182 of file security.c.
int security_capget | ( | struct task_struct * | target, |
kernel_cap_t * | effective, | ||
kernel_cap_t * | inheritable, | ||
kernel_cap_t * | permitted | ||
) |
Definition at line 159 of file security.c.
int security_capset | ( | struct cred * | new, |
const struct cred * | old, | ||
const kernel_cap_t * | effective, | ||
const kernel_cap_t * | inheritable, | ||
const kernel_cap_t * | permitted | ||
) |
Definition at line 167 of file security.c.
Definition at line 788 of file security.c.
Definition at line 793 of file security.c.
Definition at line 1017 of file security.c.
Definition at line 667 of file security.c.
Definition at line 743 of file security.c.
Definition at line 672 of file security.c.
Definition at line 677 of file security.c.
Definition at line 738 of file security.c.
int security_file_mprotect | ( | struct vm_area_struct * | vma, |
unsigned long | reqprot, | ||
unsigned long | prot | ||
) |
Definition at line 732 of file security.c.
Definition at line 764 of file security.c.
Definition at line 656 of file security.c.
Definition at line 759 of file security.c.
int security_file_send_sigiotask | ( | struct task_struct * | tsk, |
struct fown_struct * | fown, | ||
int | sig | ||
) |
Definition at line 753 of file security.c.
Definition at line 748 of file security.c.
int security_getprocattr | ( | struct task_struct * | p, |
char * | name, | ||
char ** | value | ||
) |
Definition at line 1025 of file security.c.
security_init - initializes the security framework
This should be called early in the kernel initialization sequence.
Definition at line 64 of file security.c.
Definition at line 315 of file security.c.
Definition at line 462 of file security.c.
Definition at line 532 of file security.c.
Definition at line 321 of file security.c.
Definition at line 559 of file security.c.
Definition at line 1070 of file security.c.
Definition at line 651 of file security.c.
int security_inode_getsecurity | ( | const struct inode * | inode, |
const char * | name, | ||
void ** | buffer, | ||
bool | alloc | ||
) |
Definition at line 630 of file security.c.
Definition at line 591 of file security.c.
int security_inode_init_security | ( | struct inode * | inode, |
struct inode * | dir, | ||
const struct qstr * | qstr, | ||
const initxattrs | initxattrs, | ||
void * | fs_data | ||
) |
Definition at line 327 of file security.c.
Definition at line 625 of file security.c.
int security_inode_link | ( | struct dentry * | old_dentry, |
struct inode * | dir, | ||
struct dentry * | new_dentry | ||
) |
Definition at line 470 of file security.c.
Definition at line 644 of file security.c.
Definition at line 598 of file security.c.
Definition at line 493 of file security.c.
Definition at line 508 of file security.c.
Definition at line 620 of file security.c.
Definition at line 1058 of file security.c.
Definition at line 539 of file security.c.
void security_inode_post_setxattr | ( | struct dentry * | dentry, |
const char * | name, | ||
const void * | value, | ||
size_t | size, | ||
int | flags | ||
) |
Definition at line 582 of file security.c.
Definition at line 525 of file security.c.
Definition at line 605 of file security.c.
int security_inode_rename | ( | struct inode * | old_dir, |
struct dentry * | old_dentry, | ||
struct inode * | new_dir, | ||
struct dentry * | new_dentry | ||
) |
Definition at line 515 of file security.c.
Definition at line 501 of file security.c.
Definition at line 546 of file security.c.
Definition at line 1064 of file security.c.
int security_inode_setsecurity | ( | struct inode * | inode, |
const char * | name, | ||
const void * | value, | ||
size_t | size, | ||
int | flags | ||
) |
Definition at line 637 of file security.c.
int security_inode_setxattr | ( | struct dentry * | dentry, |
const char * | name, | ||
const void * | value, | ||
size_t | size, | ||
int | flags | ||
) |
Definition at line 566 of file security.c.
Definition at line 485 of file security.c.
Definition at line 478 of file security.c.
void security_ipc_getsecid | ( | struct kern_ipc_perm * | ipcp, |
u32 * | secid | ||
) |
Definition at line 919 of file security.c.
int security_ipc_permission | ( | struct kern_ipc_perm * | ipcp, |
short | flag | ||
) |
Definition at line 914 of file security.c.
Definition at line 808 of file security.c.
Definition at line 813 of file security.c.
Definition at line 818 of file security.c.
Definition at line 727 of file security.c.
Definition at line 716 of file security.c.
security_module_enable - Load given security module on boot ? : a pointer to the struct security_operations that is to be checked.
Each LSM must pass this method before registering its own operations to avoid security registration races. This method may also be used to check if your LSM is currently loaded during kernel initialization.
Return true if: -The passed LSM is the one chosen by user at boot time, -or the passed LSM is configured as the default and the user did not choose an alternate LSM at boot time. Otherwise, return false.
Definition at line 102 of file security.c.
Definition at line 924 of file security.c.
Definition at line 929 of file security.c.
Definition at line 934 of file security.c.
Definition at line 944 of file security.c.
Definition at line 939 of file security.c.
Definition at line 949 of file security.c.
int security_msg_queue_msgrcv | ( | struct msg_queue * | msq, |
struct msg_msg * | msg, | ||
struct task_struct * | target, | ||
long | type, | ||
int | mode | ||
) |
Definition at line 960 of file security.c.
Definition at line 954 of file security.c.
Definition at line 1035 of file security.c.
int security_old_inode_init_security | ( | struct inode * | inode, |
struct inode * | dir, | ||
const struct qstr * | qstr, | ||
char ** | name, | ||
void ** | value, | ||
size_t * | len | ||
) |
Definition at line 364 of file security.c.
Definition at line 798 of file security.c.
int security_ptrace_access_check | ( | struct task_struct * | child, |
unsigned int | mode | ||
) |
Definition at line 137 of file security.c.
int security_ptrace_traceme | ( | struct task_struct * | parent | ) |
Definition at line 148 of file security.c.
Definition at line 193 of file security.c.
Definition at line 188 of file security.c.
Definition at line 1052 of file security.c.
int security_sb_alloc | ( | struct super_block * | sb | ) |
Definition at line 243 of file security.c.
void security_sb_clone_mnt_opts | ( | const struct super_block * | oldsb, |
struct super_block * | newsb | ||
) |
Definition at line 302 of file security.c.
Definition at line 253 of file security.c.
void security_sb_free | ( | struct super_block * | sb | ) |
Definition at line 248 of file security.c.
int security_sb_kern_mount | ( | struct super_block * | sb, |
int | flags, | ||
void * | data | ||
) |
Definition at line 264 of file security.c.
int security_sb_mount | ( | const char * | dev_name, |
struct path * | path, | ||
const char * | type, | ||
unsigned long | flags, | ||
void * | data | ||
) |
Definition at line 279 of file security.c.
int security_sb_parse_opts_str | ( | char * | options, |
struct security_mnt_opts * | opts | ||
) |
Definition at line 309 of file security.c.
Definition at line 290 of file security.c.
int security_sb_remount | ( | struct super_block * | sb, |
void * | data | ||
) |
Definition at line 259 of file security.c.
int security_sb_set_mnt_opts | ( | struct super_block * | sb, |
struct security_mnt_opts * | opts | ||
) |
Definition at line 295 of file security.c.
int security_sb_show_options | ( | struct seq_file * | m, |
struct super_block * | sb | ||
) |
Definition at line 269 of file security.c.
Definition at line 274 of file security.c.
Definition at line 285 of file security.c.
Definition at line 1046 of file security.c.
Definition at line 1040 of file security.c.
Definition at line 991 of file security.c.
Definition at line 1001 of file security.c.
Definition at line 996 of file security.c.
Definition at line 1006 of file security.c.
Definition at line 1011 of file security.c.
Definition at line 1030 of file security.c.
Definition at line 203 of file security.c.
int security_shm_alloc | ( | struct shmid_kernel * | shp | ) |
Definition at line 966 of file security.c.
int security_shm_associate | ( | struct shmid_kernel * | shp, |
int | shmflg | ||
) |
Definition at line 976 of file security.c.
void security_shm_free | ( | struct shmid_kernel * | shp | ) |
Definition at line 971 of file security.c.
Definition at line 986 of file security.c.
int security_shm_shmctl | ( | struct shmid_kernel * | shp, |
int | cmd | ||
) |
Definition at line 981 of file security.c.
Definition at line 198 of file security.c.
Definition at line 775 of file security.c.
Definition at line 823 of file security.c.
void security_task_free | ( | struct task_struct * | task | ) |
Definition at line 780 of file security.c.
int security_task_getioprio | ( | struct task_struct * | p | ) |
Definition at line 860 of file security.c.
int security_task_getpgid | ( | struct task_struct * | p | ) |
Definition at line 834 of file security.c.
int security_task_getscheduler | ( | struct task_struct * | p | ) |
Definition at line 876 of file security.c.
void security_task_getsecid | ( | struct task_struct * | p, |
u32 * | secid | ||
) |
Definition at line 844 of file security.c.
int security_task_getsid | ( | struct task_struct * | p | ) |
Definition at line 839 of file security.c.
Definition at line 886 of file security.c.
int security_task_movememory | ( | struct task_struct * | p | ) |
Definition at line 881 of file security.c.
int security_task_prctl | ( | int | option, |
unsigned long | arg2, | ||
unsigned long | arg3, | ||
unsigned long | arg4, | ||
unsigned long | arg5 | ||
) |
Definition at line 897 of file security.c.
int security_task_setioprio | ( | struct task_struct * | p, |
int | ioprio | ||
) |
Definition at line 855 of file security.c.
int security_task_setnice | ( | struct task_struct * | p, |
int | nice | ||
) |
Definition at line 850 of file security.c.
int security_task_setpgid | ( | struct task_struct * | p, |
pid_t | pgid | ||
) |
Definition at line 829 of file security.c.
int security_task_setrlimit | ( | struct task_struct * | p, |
unsigned int | resource, | ||
struct rlimit * | new_rlim | ||
) |
Definition at line 865 of file security.c.
int security_task_setscheduler | ( | struct task_struct * | p | ) |
Definition at line 871 of file security.c.
void security_task_to_inode | ( | struct task_struct * | p, |
struct inode * | inode | ||
) |
Definition at line 909 of file security.c.
int security_task_wait | ( | struct task_struct * | p | ) |
Definition at line 892 of file security.c.
Definition at line 803 of file security.c.