adf_main.c File Reference

#include <linux/string.h>
#include <linux/init.h>
#include <linux/config.h>
#include <linux/module.h>
#include <rsbac/types.h>
#include <rsbac/aci.h>
#include <rsbac/adf.h>
#include <rsbac/adf_main.h>
#include <rsbac/error.h>
#include <rsbac/helpers.h>
#include <rsbac/getname.h>
#include <rsbac/rkmem.h>
#include <rsbac/network.h>

Go to the source code of this file.

Functions
void __init	rsbac_init_adf (void)
enum rsbac_adf_req_ret_t	adf_and_plus (enum rsbac_adf_req_ret_t res1, enum rsbac_adf_req_ret_t res2)
	EXPORT_SYMBOL (rsbac_adf_request_int)
enum rsbac_adf_req_ret_t	rsbac_adf_request_int (enum rsbac_adf_request_t request, rsbac_pid_t caller_pid, enum rsbac_target_t target, union rsbac_target_id_t *tid_p, enum rsbac_attribute_t attr, union rsbac_attribute_value_t *attr_val_p, enum rsbac_switch_target_t ignore_module)
enum rsbac_adf_req_ret_t	rsbac_adf_request (enum rsbac_adf_request_t request, rsbac_pid_t caller_pid, enum rsbac_target_t target, union rsbac_target_id_t tid, enum rsbac_attribute_t attr, union rsbac_attribute_value_t attr_val)
	EXPORT_SYMBOL (rsbac_adf_set_attr)
int	rsbac_adf_set_attr (enum rsbac_adf_request_t request, rsbac_pid_t caller_pid, enum rsbac_target_t target, union rsbac_target_id_t tid, enum rsbac_target_t new_target, union rsbac_target_id_t new_tid, enum rsbac_attribute_t attr, union rsbac_attribute_value_t attr_val)
	EXPORT_SYMBOL (rsbac_sec_trunc)
int	rsbac_sec_trunc (struct dentry *dentry_p, loff_t new_len, loff_t old_len)
	EXPORT_SYMBOL (rsbac_sec_del)
int	rsbac_sec_del (struct dentry *dentry_p)
int	rsbac_set_audit_uid (rsbac_uid_t uid)
Variables
u_long	rsbac_adf_request_count [T_NONE+1] = {0,0,0,0,0,0,0,0}
u_long	rsbac_adf_set_attr_count [T_NONE+1] = {0,0,0,0,0,0,0,0}

---

Function Documentation

enum rsbac_adf_req_ret_t adf_and_plus (  enum rsbac_adf_req_ret_t  res1, enum rsbac_adf_req_ret_t  res2 )

Definition at line 149 of file adf_main.c. References DO_NOT_CARE, GRANTED, NOT_GRANTED, and UNDEFINED. Referenced by rsbac_adf_request_int(), and rsbac_adf_request_reg().

EXPORT_SYMBOL (  rsbac_sec_del   )

EXPORT_SYMBOL (  rsbac_sec_trunc   )

EXPORT_SYMBOL (  rsbac_adf_set_attr   )

EXPORT_SYMBOL (  rsbac_adf_request_int   )

enum rsbac_adf_req_ret_t rsbac_adf_request (  enum rsbac_adf_request_t  request, rsbac_pid_t  caller_pid, enum rsbac_target_t  target, union rsbac_target_id_t  tid, enum rsbac_attribute_t  attr, union rsbac_attribute_value_t  attr_val )

Definition at line 1473 of file adf_main.c. References rsbac_adf_request_int(), and SW_NONE. Referenced by rsbac_aef_file_permission(), rsbac_aef_inode_create(), rsbac_aef_inode_follow_link(), rsbac_aef_inode_getattr(), rsbac_aef_inode_link(), rsbac_aef_inode_mkdir(), rsbac_aef_inode_mknod(), rsbac_aef_inode_readlink(), rsbac_aef_inode_rename(), rsbac_aef_inode_symlink(), rsbac_aef_msg_queue_alloc_security(), rsbac_aef_ptrace(), rsbac_aef_sb_mount(), rsbac_aef_sb_pivotroot(), rsbac_aef_sb_umount(), rsbac_aef_shm_alloc_security(), rsbac_aef_shm_shmat(), rsbac_aef_statfs(), rsbac_aef_sysctl(), rsbac_aef_task_kill(), rsbac_aef_task_setgid(), rsbac_aef_task_setgroups(), rsbac_aef_task_setrlimit(), rsbac_aef_task_setuid(), rsbac_stats_acl(), rsbac_stats_auth(), rsbac_stats_mac(), rsbac_stats_um(), sys_rsbac_adf_log_switch(), sys_rsbac_auth_add_f_cap(), sys_rsbac_auth_get_f_caplist(), sys_rsbac_auth_get_p_caplist(), sys_rsbac_auth_remove_f_cap(), sys_rsbac_check(), sys_rsbac_get_adf_log(), sys_rsbac_get_attr(), sys_rsbac_get_attr_n(), sys_rsbac_net_list_all_template(), sys_rsbac_net_template(), sys_rsbac_remove_target(), sys_rsbac_remove_target_n(), sys_rsbac_set_attr(), sys_rsbac_set_attr_n(), sys_rsbac_stats(), sys_rsbac_stats_pm(), sys_rsbac_switch(), sys_rsbac_um_add_gm(), sys_rsbac_um_add_group(), sys_rsbac_um_add_user(), sys_rsbac_um_check_account(), sys_rsbac_um_check_account_name(), sys_rsbac_um_get_gid(), sys_rsbac_um_get_gm_list(), sys_rsbac_um_get_gm_user_list(), sys_rsbac_um_get_group_item(), sys_rsbac_um_get_group_list(), sys_rsbac_um_get_next_user(), sys_rsbac_um_get_uid(), sys_rsbac_um_get_user_item(), sys_rsbac_um_get_user_list(), sys_rsbac_um_group_exists(), sys_rsbac_um_mod_group(), sys_rsbac_um_mod_user(), sys_rsbac_um_remove_gm(), sys_rsbac_um_remove_group(), sys_rsbac_um_remove_user(), sys_rsbac_um_set_group_pass(), sys_rsbac_um_set_pass(), sys_rsbac_um_user_exists(), and sys_rsbac_write().

enum rsbac_adf_req_ret_t rsbac_adf_request_int (  enum rsbac_adf_request_t  request, rsbac_pid_t  caller_pid, enum rsbac_target_t  target, union rsbac_target_id_t *  tid_p, enum rsbac_attribute_t  attr, union rsbac_attribute_value_t *  attr_val_p, enum rsbac_switch_target_t  ignore_module )

Definition at line 173 of file adf_main.c. References A_audit_uid, A_local_log_array_high, A_local_log_array_low, A_log_array_high, A_log_array_low, A_log_program_based, A_log_user_based, A_none, A_pseudo, A_remote_log_array_high, A_remote_log_array_low, ACL, adf_and_plus(), rsbac_attribute_value_t::audit_uid, AUTH, CAP, DAZ, DO_NOT_CARE, rsbac_attribute_value_t::dummy, FALSE, FC, FF, GEN, get_attribute_name(), get_attribute_value_name(), get_request_name(), get_result_name(), get_target_name(), GRANTED, JAIL, LL_denied, LL_full, LL_request, rsbac_attribute_value_t::log_array_high, rsbac_attribute_value_t::log_array_low, rsbac_attribute_value_t::log_program_based, rsbac_attribute_value_t::log_user_based, MAC, NOT_GRANTED, NULL, rsbac_attribute_value_t::owner, PAX, PM, rsbac_target_id_t::process, rsbac_attribute_value_t::pseudo, R_CHANGE_DAC_EFF_GROUP, R_CHANGE_DAC_EFF_OWNER, R_CHANGE_DAC_FS_GROUP, R_CHANGE_DAC_FS_OWNER, R_CHANGE_GROUP, R_CHANGE_OWNER, R_CHDIR, R_CLOSE, R_GET_PERMISSIONS_DATA, R_GET_STATUS_DATA, R_NONE, R_READ, R_READ_ATTRIBUTE, R_SEARCH, R_TERMINATE, RC, REG, RES, rsbac_adf_request_acl(), rsbac_adf_request_auth(), rsbac_adf_request_cap(), rsbac_adf_request_check(), rsbac_adf_request_count, rsbac_adf_request_daz(), rsbac_adf_request_fc(), rsbac_adf_request_ff(), rsbac_adf_request_jail(), rsbac_adf_request_mac(), rsbac_adf_request_pax(), rsbac_adf_request_pm(), rsbac_adf_request_rc(), rsbac_adf_request_reg(), rsbac_adf_request_res(), rsbac_adf_request_sim(), RSBAC_EINVALIDDEV, rsbac_get_attr, rsbac_get_full_path(), rsbac_get_super_block(), rsbac_is_initialized(), rsbac_kfree(), rsbac_kmalloc(), rsbac_log_levels, RSBAC_MAXNAMELEN, rsbac_min, rsbac_net_remote_request(), RSBAC_NO_USER, rsbac_remove_target, rsbac_um_group_exists(), rsbac_um_user_exists(), SIM, SW_NONE, T_DEV, T_DIR, T_FIFO, T_FILE, T_NETDEV, T_NETOBJ, T_NETTEMP, T_NONE, T_PROCESS, T_SYMLINK, T_USER, TRUE, UNDEFINED, and rsbac_target_id_t::user. Referenced by rsbac_adf_request(), and rsbac_pm().

int rsbac_adf_set_attr (  enum rsbac_adf_request_t  request, rsbac_pid_t  caller_pid, enum rsbac_target_t  target, union rsbac_target_id_t  tid, enum rsbac_target_t  new_target, union rsbac_target_id_t  new_tid, enum rsbac_attribute_t  attr, union rsbac_attribute_value_t  attr_val )

Definition at line 1497 of file adf_main.c. References A_audit_uid, A_auid_exempt, A_fake_root_uid, A_log_array_high, A_log_array_low, A_log_program_based, A_log_user_based, A_none, rsbac_attribute_value_t::audit_uid, rsbac_attribute_value_t::auid_exempt, rsbac_attribute_value_t::dummy, rsbac_attribute_value_t::fake_root_uid, FALSE, GEN, get_attribute_name(), get_request_name(), get_target_name(), I_shm, rsbac_target_id_t::ipc, LL_denied, LL_full, LL_request, rsbac_attribute_value_t::log_array_high, rsbac_attribute_value_t::log_array_low, rsbac_attribute_value_t::log_program_based, rsbac_attribute_value_t::log_user_based, rsbac_target_id_t::process, R_CLONE, R_CLOSE, R_DELETE, R_EXECUTE, R_NONE, rsbac_adf_set_attr_acl(), rsbac_adf_set_attr_auth(), rsbac_adf_set_attr_cap(), rsbac_adf_set_attr_check(), rsbac_adf_set_attr_count, rsbac_adf_set_attr_daz(), rsbac_adf_set_attr_fc(), rsbac_adf_set_attr_ff(), rsbac_adf_set_attr_jail(), rsbac_adf_set_attr_mac(), rsbac_adf_set_attr_pax(), rsbac_adf_set_attr_pm(), rsbac_adf_set_attr_rc(), rsbac_adf_set_attr_reg(), rsbac_adf_set_attr_res(), rsbac_adf_set_attr_sim(), RSBAC_EINVALIDVALUE, rsbac_get_attr, rsbac_get_super_block(), rsbac_is_initialized(), rsbac_kfree(), rsbac_kmalloc(), rsbac_log_levels, RSBAC_MAXNAMELEN, RSBAC_NO_USER, rsbac_remove_target, rsbac_set_attr, T_DEV, T_DIR, T_FIFO, T_FILE, T_IPC, T_NETDEV, T_NETOBJ, T_NETTEMP, T_NONE, T_PROCESS, T_SYMLINK, T_USER, TRUE, rsbac_ipc_t::type, and rsbac_target_id_t::user. Referenced by rsbac_aef_inode_post_create(), rsbac_aef_inode_post_mkdir(), rsbac_aef_inode_post_mknod(), and rsbac_aef_inode_post_symlink().

void __init rsbac_init_adf (  void   )

Definition at line 140 of file adf_main.c. References rsbac_reg_init(). Referenced by rsbac_do_init().

int rsbac_sec_del (  struct dentry *  dentry_p  )

Definition at line 2709 of file adf_main.c.

int rsbac_sec_trunc (  struct dentry *  dentry_p, loff_t  new_len, loff_t  old_len )

Definition at line 2703 of file adf_main.c.

int rsbac_set_audit_uid (  rsbac_uid_t  uid  )

Definition at line 3086 of file adf_main.c. References A_audit_uid, A_auid_exempt, rsbac_attribute_value_t::audit_uid, rsbac_attribute_value_t::auid_exempt, GEN, rsbac_target_id_t::process, RSBAC_EREADFAILED, RSBAC_EWRITEFAILED, rsbac_get_attr, RSBAC_NO_USER, rsbac_set_attr, and T_PROCESS.

---

Variable Documentation

u_long rsbac_adf_request_count[T_NONE+1] = {0,0,0,0,0,0,0,0}

Definition at line 51 of file adf_main.c. Referenced by rsbac_adf_request_int(), and rsbac_stats().

u_long rsbac_adf_set_attr_count[T_NONE+1] = {0,0,0,0,0,0,0,0}

Definition at line 52 of file adf_main.c. Referenced by rsbac_adf_set_attr(), and rsbac_stats().

---