| /security/selinux/ |
| D | netlink.c | 74 struct sk_buff *skb; in selnl_notify() local
79 skb = alloc_skb(NLMSG_SPACE(len), GFP_USER); in selnl_notify()
80 if (!skb) in selnl_notify()
83 tmp = skb->tail; in selnl_notify()
84 nlh = NLMSG_PUT(skb, 0, 0, msgtype, len); in selnl_notify()
86 nlh->nlmsg_len = skb->tail - tmp; in selnl_notify()
87 NETLINK_CB(skb).dst_group = SELNLGRP_AVC; in selnl_notify()
88 netlink_broadcast(selnl, skb, 0, SELNLGRP_AVC, GFP_USER); in selnl_notify()
93 kfree_skb(skb); in selnl_notify()
|
| D | netlabel.c | 56 static int selinux_netlbl_sidlookup_cached(struct sk_buff *skb, in selinux_netlbl_sidlookup_cached() argument
66 netlbl_cache_add(skb, secattr); in selinux_netlbl_sidlookup_cached()
128 void selinux_netlbl_err(struct sk_buff *skb, int error, int gateway) in selinux_netlbl_err() argument
130 netlbl_skbuff_err(skb, error, gateway); in selinux_netlbl_err()
175 int selinux_netlbl_skbuff_getsid(struct sk_buff *skb, in selinux_netlbl_skbuff_getsid() argument
189 rc = netlbl_skbuff_getattr(skb, family, &secattr); in selinux_netlbl_skbuff_getsid()
191 rc = selinux_netlbl_sidlookup_cached(skb, &secattr, sid); in selinux_netlbl_skbuff_getsid()
211 int selinux_netlbl_skbuff_setsid(struct sk_buff *skb, in selinux_netlbl_skbuff_setsid() argument
222 sk = skb->sk; in selinux_netlbl_skbuff_setsid()
237 rc = netlbl_skbuff_setattr(skb, family, secattr); in selinux_netlbl_skbuff_setsid()
[all …]
|
| D | xfrm.c | 160 int selinux_xfrm_decode_session(struct sk_buff *skb, u32 *sid, int ckall) in selinux_xfrm_decode_session() argument
166 if (skb == NULL) in selinux_xfrm_decode_session()
169 sp = skb->sp; in selinux_xfrm_decode_session()
404 int selinux_xfrm_sock_rcv_skb(u32 isec_sid, struct sk_buff *skb, in selinux_xfrm_sock_rcv_skb() argument
411 sp = skb->sp; in selinux_xfrm_sock_rcv_skb()
445 int selinux_xfrm_postroute_last(u32 isec_sid, struct sk_buff *skb, in selinux_xfrm_postroute_last() argument
451 dst = skb_dst(skb); in selinux_xfrm_postroute_last()
|
| D | hooks.c | 3654 static int selinux_parse_skb_ipv4(struct sk_buff *skb, in selinux_parse_skb_ipv4() argument
3660 offset = skb_network_offset(skb); in selinux_parse_skb_ipv4()
3661 ih = skb_header_pointer(skb, offset, sizeof(_iph), &_iph); in selinux_parse_skb_ipv4()
3684 th = skb_header_pointer(skb, offset, sizeof(_tcph), &_tcph); in selinux_parse_skb_ipv4()
3700 uh = skb_header_pointer(skb, offset, sizeof(_udph), &_udph); in selinux_parse_skb_ipv4()
3716 dh = skb_header_pointer(skb, offset, sizeof(_dccph), &_dccph); in selinux_parse_skb_ipv4()
3735 static int selinux_parse_skb_ipv6(struct sk_buff *skb, in selinux_parse_skb_ipv6() argument
3743 offset = skb_network_offset(skb); in selinux_parse_skb_ipv6()
3744 ip6 = skb_header_pointer(skb, offset, sizeof(_ipv6h), &_ipv6h); in selinux_parse_skb_ipv6()
3754 offset = ipv6_skip_exthdr(skb, offset, &nexthdr, &frag_off); in selinux_parse_skb_ipv6()
[all …]
|
| /security/selinux/include/ |
| D | xfrm.h | 45 int selinux_xfrm_sock_rcv_skb(u32 sid, struct sk_buff *skb,
47 int selinux_xfrm_postroute_last(u32 isec_sid, struct sk_buff *skb,
49 int selinux_xfrm_decode_session(struct sk_buff *skb, u32 *sid, int ckall);
61 static inline int selinux_xfrm_sock_rcv_skb(u32 isec_sid, struct sk_buff *skb, in selinux_xfrm_sock_rcv_skb() argument
67 static inline int selinux_xfrm_postroute_last(u32 isec_sid, struct sk_buff *skb, in selinux_xfrm_postroute_last() argument
73 static inline int selinux_xfrm_decode_session(struct sk_buff *skb, u32 *sid, int ckall) in selinux_xfrm_decode_session() argument
84 static inline void selinux_skb_xfrm_sid(struct sk_buff *skb, u32 *sid) in selinux_skb_xfrm_sid() argument
86 int err = selinux_xfrm_decode_session(skb, sid, 0); in selinux_skb_xfrm_sid()
|
| D | netlabel.h | 43 void selinux_netlbl_err(struct sk_buff *skb, int error, int gateway);
48 int selinux_netlbl_skbuff_getsid(struct sk_buff *skb,
52 int selinux_netlbl_skbuff_setsid(struct sk_buff *skb,
60 struct sk_buff *skb,
74 static inline void selinux_netlbl_err(struct sk_buff *skb, in selinux_netlbl_err() argument
93 static inline int selinux_netlbl_skbuff_getsid(struct sk_buff *skb, in selinux_netlbl_skbuff_getsid() argument
102 static inline int selinux_netlbl_skbuff_setsid(struct sk_buff *skb, in selinux_netlbl_skbuff_setsid() argument
130 struct sk_buff *skb, in selinux_netlbl_sock_rcv_skb() argument
|
| /security/ |
| D | lsm_audit.c | 42 int ipv4_skb_to_auditdata(struct sk_buff *skb, in ipv4_skb_to_auditdata() argument
48 ih = ip_hdr(skb); in ipv4_skb_to_auditdata()
63 struct tcphdr *th = tcp_hdr(skb); in ipv4_skb_to_auditdata()
72 struct udphdr *uh = udp_hdr(skb); in ipv4_skb_to_auditdata()
81 struct dccp_hdr *dh = dccp_hdr(skb); in ipv4_skb_to_auditdata()
90 struct sctphdr *sh = sctp_hdr(skb); in ipv4_skb_to_auditdata()
111 int ipv6_skb_to_auditdata(struct sk_buff *skb, in ipv6_skb_to_auditdata() argument
119 ip6 = ipv6_hdr(skb); in ipv6_skb_to_auditdata()
127 offset = skb_network_offset(skb); in ipv6_skb_to_auditdata()
130 offset = ipv6_skip_exthdr(skb, offset, &nexthdr, &frag_off); in ipv6_skb_to_auditdata()
[all …]
|
| D | security.c | 986 int security_netlink_send(struct sock *sk, struct sk_buff *skb) in security_netlink_send() argument
988 return security_ops->netlink_send(sk, skb); in security_netlink_send()
1109 int security_sock_rcv_skb(struct sock *sk, struct sk_buff *skb) in security_sock_rcv_skb() argument
1111 return security_ops->socket_sock_rcv_skb(sk, skb); in security_sock_rcv_skb()
1121 int security_socket_getpeersec_dgram(struct socket *sock, struct sk_buff *skb, u32 *secid) in security_socket_getpeersec_dgram() argument
1123 return security_ops->socket_getpeersec_dgram(sock, skb, secid); in security_socket_getpeersec_dgram()
1162 struct sk_buff *skb, struct request_sock *req) in security_inet_conn_request() argument
1164 return security_ops->inet_conn_request(sk, skb, req); in security_inet_conn_request()
1175 struct sk_buff *skb) in security_inet_conn_established() argument
1177 security_ops->inet_conn_established(sk, skb); in security_inet_conn_established()
[all …]
|
| D | capability.c | 655 static int cap_socket_sock_rcv_skb(struct sock *sk, struct sk_buff *skb) in cap_socket_sock_rcv_skb() argument
668 struct sk_buff *skb, u32 *secid) in cap_socket_getpeersec_dgram() argument
694 static int cap_inet_conn_request(struct sock *sk, struct sk_buff *skb, in cap_inet_conn_request() argument
705 static void cap_inet_conn_established(struct sock *sk, struct sk_buff *skb) in cap_inet_conn_established() argument
792 static int cap_xfrm_decode_session(struct sk_buff *skb, u32 *fl, int ckall) in cap_xfrm_decode_session() argument
|
| D | commoncap.c | 60 int cap_netlink_send(struct sock *sk, struct sk_buff *skb) in cap_netlink_send() argument
|
| /security/smack/ |
| D | smack_lsm.c | 2996 static int smack_socket_sock_rcv_skb(struct sock *sk, struct sk_buff *skb) in smack_socket_sock_rcv_skb() argument
3014 rc = netlbl_skbuff_getattr(skb, sk->sk_family, &secattr); in smack_socket_sock_rcv_skb()
3025 ad.a.u.net->netif = skb->skb_iif; in smack_socket_sock_rcv_skb()
3026 ipv4_skb_to_auditdata(skb, &ad.a, NULL); in smack_socket_sock_rcv_skb()
3036 netlbl_skbuff_err(skb, rc, 0); in smack_socket_sock_rcv_skb()
3085 struct sk_buff *skb, u32 *secid) in smack_socket_getpeersec_dgram() argument
3095 if (skb != NULL) { in smack_socket_getpeersec_dgram()
3096 if (skb->protocol == htons(ETH_P_IP)) in smack_socket_getpeersec_dgram()
3098 else if (skb->protocol == htons(ETH_P_IPV6)) in smack_socket_getpeersec_dgram()
3114 rc = netlbl_skbuff_getattr(skb, family, &secattr); in smack_socket_getpeersec_dgram()
[all …]
|