/linux-6.3-rc2/security/apparmor/ |
A D | secid.c | 47 void aa_secid_update(u32 secid, struct aa_label *label) in aa_secid_update() argument 52 __xa_store(&aa_secids, secid, label, 0); in aa_secid_update() 60 struct aa_label *aa_secid_to_label(u32 secid) in aa_secid_to_label() argument 62 return xa_load(&aa_secids, secid); in aa_secid_to_label() 65 int apparmor_secid_to_secctx(u32 secid, char **secdata, u32 *seclen) in apparmor_secid_to_secctx() argument 68 struct aa_label *label = aa_secid_to_label(secid); in apparmor_secid_to_secctx() 102 *secid = label->secid; in apparmor_secctx_to_secid() 126 ret = __xa_alloc(&aa_secids, &label->secid, label, in aa_alloc_secid() 131 label->secid = AA_SECID_INVALID; in aa_alloc_secid() 142 void aa_free_secid(u32 secid) in aa_free_secid() argument [all …]
|
A D | net.c | 200 secmark->secid = AA_SECID_WILDCARD; in apparmor_secmark_init() 211 secmark->secid = label->secid; in apparmor_secmark_init() 216 static int aa_secmark_perm(struct aa_profile *profile, u32 request, u32 secid, in aa_secmark_perm() argument 228 if (!rules->secmark[i].secid) { in aa_secmark_perm() 234 if (rules->secmark[i].secid == secid || in aa_secmark_perm() 235 rules->secmark[i].secid == AA_SECID_WILDCARD) { in aa_secmark_perm() 252 u32 secid, const struct sock *sk) in apparmor_secmark_check() argument 258 aa_secmark_perm(profile, request, secid, in apparmor_secmark_check()
|
/linux-6.3-rc2/net/netfilter/ |
A D | xt_SECMARK.c | 33 secmark = info->secid; in secmark_tg() 48 info->secid = 0; in checkentry_lsm() 51 &info->secid); in checkentry_lsm() 59 if (!info->secid) { in checkentry_lsm() 65 err = security_secmark_relabel_packet(info->secid); in checkentry_lsm() 129 info->secid = newinfo.secid; in secmark_tg_check_v0() 139 .secid = info->secid, in secmark_tg_v0() 175 .usersize = offsetof(struct xt_secmark_target_info_v1, secid),
|
/linux-6.3-rc2/security/apparmor/include/ |
A D | secid.h | 27 struct aa_label *aa_secid_to_label(u32 secid); 28 int apparmor_secid_to_secctx(u32 secid, char **secdata, u32 *seclen); 29 int apparmor_secctx_to_secid(const char *secdata, u32 seclen, u32 *secid); 34 void aa_free_secid(u32 secid); 35 void aa_secid_update(u32 secid, struct aa_label *label);
|
A D | net.h | 86 u32 secid; member 111 u32 secid, const struct sock *sk);
|
/linux-6.3-rc2/security/integrity/ima/ |
A D | ima_main.c | 415 u32 secid; in ima_file_mmap() local 421 security_current_getsecid_subj(&secid); in ima_file_mmap() 460 u32 secid; in ima_file_mprotect() local 468 security_current_getsecid_subj(&secid); in ima_file_mprotect() 474 current_cred(), secid, MAY_EXEC, in ima_file_mprotect() 511 u32 secid; in ima_bprm_check() local 536 u32 secid; in ima_file_check() local 740 u32 secid; in ima_read_file() local 790 u32 secid; in ima_post_read_file() local 930 u32 secid; in process_buffer_measurement() local [all …]
|
A D | ima.h | 259 const struct cred *cred, u32 secid, int mask, 290 const struct cred *cred, u32 secid, enum ima_hooks func, 442 static inline int ima_filter_rule_match(u32 secid, u32 field, u32 op, in ima_filter_rule_match() argument
|
/linux-6.3-rc2/net/netlabel/ |
A D | netlabel_unlabeled.c | 69 u32 secid; member 77 u32 secid; member 246 entry->secid = secid; in netlbl_unlhsh_add_addr4() 290 entry->secid = secid; in netlbl_unlhsh_add_addr6() 883 u32 secid; in netlbl_unlabel_staticadd() local 907 &secid); in netlbl_unlabel_staticadd() 934 u32 secid; in netlbl_unlabel_staticadddef() local 956 &secid); in netlbl_unlabel_staticadddef() 1073 u32 secid; in netlbl_unlabel_staticlist_gen() local 1113 secid = addr4->secid; in netlbl_unlabel_staticlist_gen() [all …]
|
A D | netlabel_user.c | 101 if (audit_info->secid != 0 && in netlbl_audit_start_common() 102 security_secid_to_secctx(audit_info->secid, in netlbl_audit_start_common()
|
A D | netlabel_user.h | 35 security_current_getsecid_subj(&audit_info->secid); in netlbl_netlink_auditinfo()
|
A D | netlabel_unlabeled.h | 214 u32 secid,
|
/linux-6.3-rc2/drivers/dio/ |
A D | dio.c | 124 u_char prid, secid, i; in dio_find() local 153 secid = DIO_SECID(va); in dio_find() 154 id = DIO_ENCODE_ID(prid, secid); in dio_find() 199 u_char prid, secid = 0; /* primary, secondary ID bytes */ in dio_init() local 244 secid = DIO_SECID(va); in dio_init() 245 dev->id = DIO_ENCODE_ID(prid, secid); in dio_init() 253 printk(":%02X", secid); in dio_init()
|
/linux-6.3-rc2/include/linux/ |
A D | security.h | 413 int security_kernel_act_as(struct cred *new, u32 secid); 432 void security_current_getsecid_subj(u32 *secid); 957 *secid = 0; in security_inode_getsecid() 1082 *secid = 0; in security_cred_getsecid() 1164 *secid = 0; in security_current_getsecid_subj() 1169 *secid = 0; in security_task_getsecid_obj() 1247 *secid = 0; in security_ipc_getsecid() 1374 u32 *secid) in security_secctx_to_secid() argument 1464 int security_secmark_relabel_packet(u32 secid); 1744 struct xfrm_sec_ctx *polsec, u32 secid); [all …]
|
A D | lsm_hook_defs.h | 163 LSM_HOOK(void, LSM_RET_VOID, inode_getsecid, struct inode *inode, u32 *secid) 197 LSM_HOOK(int, 0, kernel_act_as, struct cred *new, u32 secid) 215 LSM_HOOK(void, LSM_RET_VOID, current_getsecid_subj, u32 *secid) 217 struct task_struct *p, u32 *secid) 237 u32 *secid) 268 LSM_HOOK(int, -EOPNOTSUPP, secid_to_secctx, u32 secid, char **secdata, 314 struct sk_buff *skb, u32 *secid) 319 LSM_HOOK(void, LSM_RET_VOID, sk_getsecid, struct sock *sk, u32 *secid) 327 LSM_HOOK(int, 0, secmark_relabel_packet, u32 secid) 367 struct xfrm_sec_ctx *polsec, u32 secid) [all …]
|
/linux-6.3-rc2/include/uapi/linux/netfilter/ |
A D | xt_SECMARK.h | 19 __u32 secid; member 26 __u32 secid; member
|
/linux-6.3-rc2/security/ |
A D | security.c | 1550 call_void_hook(inode_getsecid, inode, secid); in security_inode_getsecid() 1799 *secid = 0; in security_cred_getsecid() 1800 call_void_hook(cred_getsecid, c, secid); in security_cred_getsecid() 1907 *secid = 0; in security_current_getsecid_subj() 1908 call_void_hook(current_getsecid_subj, secid); in security_current_getsecid_subj() 1914 *secid = 0; in security_task_getsecid_obj() 1915 call_void_hook(task_getsecid_obj, p, secid); in security_task_getsecid_obj() 2002 *secid = 0; in security_ipc_getsecid() 2003 call_void_hook(ipc_getsecid, ipcp, secid); in security_ipc_getsecid() 2201 *secid = 0; in security_secctx_to_secid() [all …]
|
/linux-6.3-rc2/include/net/ |
A D | scm.h | 36 u32 secid; /* Passed security ID */ member 49 security_socket_getpeersec_dgram(sock, NULL, &scm->secid); in unix_get_peersec_dgram() 100 err = security_secid_to_secctx(scm->secid, &secdata, &seclen); in scm_passec()
|
A D | netlabel.h | 100 u32 secid; member 204 u32 secid; member 418 u32 secid, 526 u32 secid, in netlbl_cfg_unlbl_static_add() argument
|
/linux-6.3-rc2/Documentation/networking/ |
A D | secid.rst | 4 LSM/SeLinux secid 9 The secid member in the flow structure is used in LSMs (e.g. SELinux) to indicate
|
/linux-6.3-rc2/security/selinux/ |
A D | xfrm.c | 345 struct xfrm_sec_ctx *polsec, u32 secid) in selinux_xfrm_state_alloc_acquire() argument 355 if (secid == 0) in selinux_xfrm_state_alloc_acquire() 358 rc = security_sid_to_context(&selinux_state, secid, &ctx_str, in selinux_xfrm_state_alloc_acquire() 371 ctx->ctx_sid = secid; in selinux_xfrm_state_alloc_acquire()
|
A D | netlabel.c | 111 (secattr->attr.secid == sid)) in selinux_netlbl_sock_getattr() 287 asoc->secid, &secattr); in selinux_netlbl_sctp_assoc_request() 335 rc = security_netlbl_sid_to_secattr(&selinux_state, req->secid, in selinux_netlbl_inet_conn_request()
|
A D | hooks.c | 3478 *secid = isec->sid; in selinux_inode_getsecid() 3981 *secid = cred_sid(c); in selinux_cred_getsecid() 3995 sid, secid, in selinux_kernel_act_as() 4000 tsec->sid = secid; in selinux_kernel_act_as() 4130 *secid = current_sid(); in selinux_current_getsecid_subj() 4216 u32 secid; in selinux_task_kill() local 4224 secid = current_sid(); in selinux_task_kill() 5198 *secid = peer_secid; in selinux_socket_getpeersec_dgram() 5249 *secid = sksec->sid; in selinux_sk_getsecid() 5494 req->secid = connsid; in selinux_inet_conn_request() [all …]
|
/linux-6.3-rc2/kernel/ |
A D | cred.c | 774 int set_security_override(struct cred *new, u32 secid) in set_security_override() argument 776 return security_kernel_act_as(new, secid); in set_security_override() 792 u32 secid; in set_security_override_from_ctx() local 795 ret = security_secctx_to_secid(secctx, strlen(secctx), &secid); in set_security_override_from_ctx() 799 return set_security_override(new, secid); in set_security_override_from_ctx()
|
/linux-6.3-rc2/security/smack/ |
A D | smack_lsm.c | 1543 *secid = skp->smk_secid; in smack_inode_getsecid() 2035 *secid = skp->smk_secid; in smack_cred_getsecid() 2139 *secid = skp->smk_secid; in smack_current_getsecid_subj() 2153 *secid = skp->smk_secid; in smack_task_getsecid_obj() 3332 *secid = iskp->smk_secid; in smack_ipc_getsecid() 3810 return smack_from_secid(sap->attr.secid); in smack_from_secattr() 4113 struct sk_buff *skb, u32 *secid) in smack_socket_getpeersec_dgram() argument 4161 *secid = s; in smack_socket_getpeersec_dgram() 4606 skp = smack_from_secid(secid); in smack_audit_rule_match() 4669 *secid = skp->smk_secid; in smack_secctx_to_secid() [all …]
|
A D | smack_access.c | 524 skp->smk_netlabel.attr.secid = skp->smk_secid; in smack_populate_secattr() 610 struct smack_known *smack_from_secid(const u32 secid) in smack_from_secid() argument 616 if (skp->smk_secid == secid) { in smack_from_secid()
|