| /kernel/linux/linux-5.10/security/apparmor/ |
| D | secid.c | 46 void aa_secid_update(u32 secid, struct aa_label *label) in aa_secid_update() argument
51 idr_replace(&aa_secids, label, secid); in aa_secid_update()
59 struct aa_label *aa_secid_to_label(u32 secid) in aa_secid_to_label() argument
64 label = idr_find(&aa_secids, secid); in aa_secid_to_label()
70 int apparmor_secid_to_secctx(u32 secid, char **secdata, u32 *seclen) in apparmor_secid_to_secctx() argument
73 struct aa_label *label = aa_secid_to_label(secid); in apparmor_secid_to_secctx()
98 int apparmor_secctx_to_secid(const char *secdata, u32 seclen, u32 *secid) in apparmor_secctx_to_secid() argument
106 *secid = label->secid; in apparmor_secctx_to_secid()
136 label->secid = AA_SECID_INVALID; in aa_alloc_secid()
141 label->secid = ret; in aa_alloc_secid()
[all …]
|
| D | net.c | 197 secmark->secid = AA_SECID_WILDCARD; in apparmor_secmark_init()
208 secmark->secid = label->secid; in apparmor_secmark_init()
213 static int aa_secmark_perm(struct aa_profile *profile, u32 request, u32 secid, in aa_secmark_perm() argument
223 if (!profile->secmark[i].secid) { in aa_secmark_perm()
229 if (profile->secmark[i].secid == secid || in aa_secmark_perm()
230 profile->secmark[i].secid == AA_SECID_WILDCARD) { in aa_secmark_perm()
247 u32 secid, struct sock *sk) in apparmor_secmark_check() argument
253 aa_secmark_perm(profile, request, secid, in apparmor_secmark_check()
|
| /kernel/linux/linux-5.10/net/netfilter/ |
| D | xt_SECMARK.c | 33 secmark = info->secid; in secmark_tg()
48 info->secid = 0; in checkentry_lsm()
51 &info->secid); in checkentry_lsm()
59 if (!info->secid) { in checkentry_lsm()
65 err = security_secmark_relabel_packet(info->secid); in checkentry_lsm()
129 info->secid = newinfo.secid; in secmark_tg_check_v0()
139 .secid = info->secid, in secmark_tg_v0()
175 .usersize = offsetof(struct xt_secmark_target_info_v1, secid),
|
| /kernel/linux/linux-5.10/security/apparmor/include/ |
| D | secid.h | 24 struct aa_label *aa_secid_to_label(u32 secid);
25 int apparmor_secid_to_secctx(u32 secid, char **secdata, u32 *seclen);
26 int apparmor_secctx_to_secid(const char *secdata, u32 seclen, u32 *secid);
31 void aa_free_secid(u32 secid);
32 void aa_secid_update(u32 secid, struct aa_label *label);
|
| D | net.h | 85 u32 secid; member
110 u32 secid, struct sock *sk);
|
| /kernel/linux/linux-5.10/security/integrity/ima/ |
| D | ima_main.c | 197 u32 secid, char *buf, loff_t size, int mask, in process_measurement() argument
221 action = ima_get_action(inode, cred, secid, mask, func, &pcr, in process_measurement()
391 u32 secid; in ima_file_mmap() local
394 security_task_getsecid(current, &secid); in ima_file_mmap()
395 return process_measurement(file, current_cred(), secid, NULL, in ima_file_mmap()
424 u32 secid; in ima_file_mprotect() local
432 security_task_getsecid(current, &secid); in ima_file_mprotect()
434 action = ima_get_action(inode, current_cred(), secid, MAY_EXEC, in ima_file_mprotect()
470 u32 secid; in ima_bprm_check() local
472 security_task_getsecid(current, &secid); in ima_bprm_check()
[all …]
|
| D | ima.h | 255 int ima_get_action(struct inode *inode, const struct cred *cred, u32 secid,
283 int ima_match_policy(struct inode *inode, const struct cred *cred, u32 secid,
432 static inline int ima_filter_rule_match(u32 secid, u32 field, u32 op, in ima_filter_rule_match() argument
|
| /kernel/linux/linux-5.10/net/netlabel/ |
| D | netlabel_unlabeled.c | 69 u32 secid; member
77 u32 secid; member
234 u32 secid) in netlbl_unlhsh_add_addr4() argument
246 entry->secid = secid; in netlbl_unlhsh_add_addr4()
274 u32 secid) in netlbl_unlhsh_add_addr6() argument
290 entry->secid = secid; in netlbl_unlhsh_add_addr6()
369 u32 secid, in netlbl_unlhsh_add() argument
411 ret_val = netlbl_unlhsh_add_addr4(iface, addr4, mask4, secid); in netlbl_unlhsh_add()
424 ret_val = netlbl_unlhsh_add_addr6(iface, addr6, mask6, secid); in netlbl_unlhsh_add()
441 if (security_secid_to_secctx(secid, in netlbl_unlhsh_add()
[all …]
|
| D | netlabel_user.c | 101 if (audit_info->secid != 0 && in netlbl_audit_start_common()
102 security_secid_to_secctx(audit_info->secid, in netlbl_audit_start_common()
|
| D | netlabel_user.h | 37 security_task_getsecid(current, &audit_info->secid); in netlbl_netlink_auditinfo()
|
| D | netlabel_unlabeled.h | 214 u32 secid,
|
| /kernel/linux/linux-5.10/drivers/dio/ |
| D | dio.c | 125 u_char prid, secid, i; in dio_find() local
154 secid = DIO_SECID(va); in dio_find()
155 id = DIO_ENCODE_ID(prid, secid); in dio_find()
201 u_char prid, secid = 0; /* primary, secondary ID bytes */ in dio_init() local
243 secid = DIO_SECID(va); in dio_init()
244 dev->id = DIO_ENCODE_ID(prid, secid); in dio_init()
252 printk(":%02X", secid); in dio_init()
|
| /kernel/linux/linux-5.10/include/linux/ |
| D | security.h | 362 void security_inode_getsecid(struct inode *inode, u32 *secid);
389 void security_cred_getsecid(const struct cred *c, u32 *secid);
390 int security_kernel_act_as(struct cred *new, u32 secid);
408 void security_task_getsecid(struct task_struct *p, u32 *secid);
425 void security_ipc_getsecid(struct kern_ipc_perm *ipcp, u32 *secid);
454 int security_secid_to_secctx(u32 secid, char **secdata, u32 *seclen);
455 int security_secctx_to_secid(const char *secdata, u32 seclen, u32 *secid);
888 static inline void security_inode_getsecid(struct inode *inode, u32 *secid) in security_inode_getsecid() argument
890 *secid = 0; in security_inode_getsecid()
1008 static inline void security_cred_getsecid(const struct cred *c, u32 *secid) in security_cred_getsecid() argument
[all …]
|
| D | lsm_hook_defs.h | 151 LSM_HOOK(void, LSM_RET_VOID, inode_getsecid, struct inode *inode, u32 *secid)
186 LSM_HOOK(void, LSM_RET_VOID, cred_getsecid, const struct cred *c, u32 *secid)
187 LSM_HOOK(int, 0, kernel_act_as, struct cred *new, u32 secid)
204 LSM_HOOK(void, LSM_RET_VOID, task_getsecid, struct task_struct *p, u32 *secid)
223 u32 *secid)
254 LSM_HOOK(int, -EOPNOTSUPP, secid_to_secctx, u32 secid, char **secdata,
256 LSM_HOOK(int, 0, secctx_to_secid, const char *secdata, u32 seclen, u32 *secid)
300 struct sk_buff *skb, u32 *secid)
305 LSM_HOOK(void, LSM_RET_VOID, sk_getsecid, struct sock *sk, u32 *secid)
313 LSM_HOOK(int, 0, secmark_relabel_packet, u32 secid)
[all …]
|
| /kernel/linux/linux-5.10/include/uapi/linux/netfilter/ |
| D | xt_SECMARK.h | 19 __u32 secid; member
26 __u32 secid; member
|
| /kernel/linux/linux-5.10/security/ |
| D | security.c | 1421 void security_inode_getsecid(struct inode *inode, u32 *secid) in security_inode_getsecid() argument
1423 call_void_hook(inode_getsecid, inode, secid); in security_inode_getsecid()
1664 void security_cred_getsecid(const struct cred *c, u32 *secid) in security_cred_getsecid() argument
1666 *secid = 0; in security_cred_getsecid()
1667 call_void_hook(cred_getsecid, c, secid); in security_cred_getsecid()
1671 int security_kernel_act_as(struct cred *new, u32 secid) in security_kernel_act_as() argument
1673 return call_int_hook(kernel_act_as, 0, new, secid); in security_kernel_act_as()
1767 void security_task_getsecid(struct task_struct *p, u32 *secid) in security_task_getsecid() argument
1769 *secid = 0; in security_task_getsecid()
1770 call_void_hook(task_getsecid, p, secid); in security_task_getsecid()
[all …]
|
| /kernel/linux/linux-5.10/include/net/ |
| D | scm.h | 36 u32 secid; /* Passed security ID */ member
49 security_socket_getpeersec_dgram(sock, NULL, &scm->secid); in unix_get_peersec_dgram()
100 err = security_secid_to_secctx(scm->secid, &secdata, &seclen); in scm_passec()
|
| D | netlabel.h | 100 u32 secid; member
204 u32 secid; member
418 u32 secid,
526 u32 secid, in netlbl_cfg_unlbl_static_add() argument
|
| /kernel/linux/linux-5.10/Documentation/networking/ |
| D | secid.rst | 4 LSM/SeLinux secid
9 The secid member in the flow structure is used in LSMs (e.g. SELinux) to indicate
|
| /kernel/linux/linux-5.10/security/selinux/ |
| D | xfrm.c | 345 struct xfrm_sec_ctx *polsec, u32 secid) in selinux_xfrm_state_alloc_acquire() argument
355 if (secid == 0) in selinux_xfrm_state_alloc_acquire()
358 rc = security_sid_to_context(&selinux_state, secid, &ctx_str, in selinux_xfrm_state_alloc_acquire()
371 ctx->ctx_sid = secid; in selinux_xfrm_state_alloc_acquire()
|
| D | netlabel.c | 110 (secattr->attr.secid == sid)) in selinux_netlbl_sock_getattr()
286 ep->secid, &secattr); in selinux_netlbl_sctp_assoc_request()
333 rc = security_netlbl_sid_to_secattr(&selinux_state, req->secid, in selinux_netlbl_inet_conn_request()
|
| /kernel/linux/patches/linux-4.19/prebuilts/usr/include/linux/netfilter/ |
| D | xt_SECMARK.h | 13 __u32 secid; member
|
| /kernel/linux/patches/linux-5.10/prebuilts/usr/include/linux/netfilter/ |
| D | xt_SECMARK.h | 26 __u32 secid; member
|
| /kernel/linux/linux-5.10/kernel/ |
| D | cred.c | 741 int set_security_override(struct cred *new, u32 secid) in set_security_override() argument
743 return security_kernel_act_as(new, secid); in set_security_override()
759 u32 secid; in set_security_override_from_ctx() local
762 ret = security_secctx_to_secid(secctx, strlen(secctx), &secid); in set_security_override_from_ctx()
766 return set_security_override(new, secid); in set_security_override_from_ctx()
|
| /kernel/linux/linux-5.10/security/smack/ |
| D | smack_access.c | 524 skp->smk_netlabel.attr.secid = skp->smk_secid; in smack_populate_secattr()
610 struct smack_known *smack_from_secid(const u32 secid) in smack_from_secid() argument
616 if (skp->smk_secid == secid) { in smack_from_secid()
|