include/linux/security.h

203  *	@bprm contains the linux_binprm structure.
212  *	@bprm contains the linux_binprm structure.
235  *	@bprm contains the linux_binprm structure.
243  *	@sb contains the super_block structure to be modified.
247  *	@sb contains the super_block structure to be modified.
260  *	@dev_name contains the name for object being mounted.
261  *	@path contains the path for mount point object.
262  *	@type contains the filesystem type.
263  *	@flags contains the mount flags.
264  *	@data contains the filesystem-specific data.
280  *	@data contains the filesystem-specific data.
284  *	@mnt contains the mounted file system.
285  *	@flags contains the unmount flags, e.g. MNT_FORCE.
289  *	@old_path contains the path for the new location of the current root (put_old).
290  *	@new_path contains the path for the new root (new_root).
311  *	@inode contains the inode structure.
314  *	@inode contains the inode structure.
328  *	@inode contains the inode structure of the newly created inode.
329  *	@dir contains the inode structure of the parent directory.
330  *	@qstr contains the last path component of the new object
339  *	@dir contains inode structure of the parent of the new file.
340  *	@dentry contains the dentry structure for the file to be created.
341  *	@mode contains the file mode of the file to be created.
345  *	@old_dentry contains the dentry structure for an existing link to the file.
346  *	@dir contains the inode structure of the parent directory of the new link.
347  *	@new_dentry contains the dentry structure for the new link.
351  *	@old_dentry contains the dentry structure for an existing link
353  *	@new_dir contains the path structure of the parent directory of
355  *	@new_dentry contains the dentry structure for the new link.
359  *	@dir contains the inode structure of parent directory of the file.
360  *	@dentry contains the dentry structure for file to be unlinked.
364  *	@dir contains the path structure of parent directory of the file.
365  *	@dentry contains the dentry structure for file to be unlinked.
369  *	@dir contains the inode structure of parent directory of the symbolic link.
370  *	@dentry contains the dentry structure of the symbolic link.
371  *	@old_name contains the pathname of file.
375  *	@dir contains the path structure of parent directory of
377  *	@dentry contains the dentry structure of the symbolic link.
378  *	@old_name contains the pathname of file.
383  *	@dir contains the inode structure of parent of the directory to be created.
384  *	@dentry contains the dentry structure of new directory.
385  *	@mode contains the mode of new directory.
390  *	@dir contains the path structure of parent of the directory
392  *	@dentry contains the dentry structure of new directory.
393  *	@mode contains the mode of new directory.
397  *	@dir contains the inode structure of parent of the directory to be removed.
398  *	@dentry contains the dentry structure of directory to be removed.
402  *	@dir contains the path structure of parent of the directory to be
404  *	@dentry contains the dentry structure of directory to be removed.
411  *	@dir contains the inode structure of parent of the new file.
412  *	@dentry contains the dentry structure of the new file.
413  *	@mode contains the mode of the new file.
414  *	@dev contains the device number.
419  *	@dir contains the path structure of parent of the new file.
420  *	@dentry contains the dentry structure of the new file.
421  *	@mode contains the mode of the new file.
422  *	@dev contains the undecoded device number. Use new_decode_dev() to get
427  *	@old_dir contains the inode structure for parent of the old link.
428  *	@old_dentry contains the dentry structure of the old link.
429  *	@new_dir contains the inode structure for parent of the new link.
430  *	@new_dentry contains the dentry structure of the new link.
434  *	@old_dir contains the path structure for parent of the old link.
435  *	@old_dentry contains the dentry structure of the old link.
436  *	@new_dir contains the path structure for parent of the new link.
437  *	@new_dentry contains the dentry structure of the new link.
441  *	@dentry contains the dentry structure.
442  *	@mnt contains the vfsmnt structure.
443  *	@mode contains DAC's mode.
447  *	@path contains the path structure.
448  *	@uid contains new owner's ID.
449  *	@gid contains new group's ID.
453  *	@path contains the path structure.
457  *	@dentry contains the dentry structure for the file link.
461  *	@dentry contains the dentry structure for the link.
462  *	@nd contains the nameidata structure for the parent directory.
471  *	@inode contains the inode structure to check.
472  *	@mask contains the permission mask.
479  *	@dentry contains the dentry structure for the file.
484  *	@path contains the path structure for the file.
489  *	@dentry contains the dentry structure for the file.
544  *	@inode contains a pointer to the inode.
545  *	@secid contains a pointer to the location where result will be saved.
564  *	@file contains the file structure being accessed.
565  *	@mask contains the requested permissions.
571  *	@file contains the file structure to secure.
575  *	@file contains the file structure being modified.
577  *	@file contains the file structure.
578  *	@cmd contains the operation to perform.
579  *	@arg contains the operational arguments.
588  *	@file contains the file structure for file to map (may be NULL).
589  *	@reqprot contains the protection requested by the application.
590  *	@prot contains the protection that will be applied by the kernel.
591  *	@flags contains the operational flags.
592  *	@addr contains virtual address that will be used for the operation.
593  *	@addr_only contains a boolean: 0 if file-backed VMA, otherwise 1.
597  *	@vma contains the memory region to modify.
598  *	@reqprot contains the protection requested by the application.
599  *	@prot contains the protection that will be applied by the kernel.
604  *	@file contains the file structure.
605  *	@cmd contains the posix-translated lock operation to perform
614  *	@file contains the file structure.
615  *	@cmd contains the operation to be performed.
616  *	@arg contains the operational arguments.
621  *	@file contains the file structure to update.
630  *	@tsk contains the structure of task receiving signal.
631  *	@fown contains the file owner information.
637  *	@file contains the file structure being received.
652  *	@clone_flags contains the flags indicating what should be shared.
696  *	@flags contains one of the LSM_SETID_* values.
701  *	@p contains the task_struct for process being modified.
702  *	@pgid contains the new pgid.
707  *	@p contains the task_struct for the process.
712  *	@p contains the task_struct for the process.
716  *	@p contains the task_struct for the process and place is into @secid.
721  *	@p contains the task_struct of process.
722  *	@nice contains the new nice value.
726  *	@p contains the task_struct of process.
727  *	@ioprio contains the new ioprio value
731  *	@p contains the task_struct of process.
737  *	@resource contains the resource whose limit is being set.
738  *	@new_rlim contains the new limits for @resource.
743  *	@p contains the task_struct for process.
744  *	@policy contains the scheduling policy.
745  *	@lp contains the scheduling parameters.
750  *	@p contains the task_struct for process.
754  *	@p contains the task_struct for process.
763  *	@p contains the task_struct for process.
764  *	@info contains the signal information.
765  *	@sig contains the signal value.
766  *	@secid contains the sid of the process where the signal originated
771  *	@p contains the task_struct for process.
776  *	@option contains the operation.
777  *	@arg2 contains a argument.
778  *	@arg3 contains a argument.
779  *	@arg4 contains a argument.
780  *	@arg5 contains a argument.
786  *	@p contains the task_struct for the task.
787  *	@inode contains the inode structure for the inode.
798  *	@skb contains the sk_buff structure for the netlink message.
807  *	@sock contains the sock structure.
808  *	@other contains the peer sock structure.
809  *	@newsk contains the new sock structure.
814  *	@sock contains the socket structure.
815  *	@sock contains the peer socket structure.
832  *	@family contains the requested protocol family.
833  *	@type contains the requested communications type.
834  *	@protocol contains the requested protocol.
846  *	@sock contains the newly created socket structure.
847  *	@family contains the requested protocol family.
848  *	@type contains the requested communications type.
849  *	@protocol contains the requested protocol.
855  *	@sock contains the socket structure.
856  *	@address contains the address to bind to.
857  *	@addrlen contains the length of address.
862  *	@sock contains the socket structure.
863  *	@address contains the address of remote endpoint.
864  *	@addrlen contains the length of address.
868  *	@sock contains the socket structure.
869  *	@backlog contains the maximum length for the pending connection queue.
875  *	@sock contains the listening socket structure.
876  *	@newsock contains the newly created server socket for connection.
880  *	@sock contains the socket structure.
881  *	@msg contains the message to be transmitted.
882  *	@size contains the size of message.
886  *	@sock contains the socket structure.
887  *	@msg contains the message structure.
888  *	@size contains the size of message structure.
889  *	@flags contains the operational flags.
894  *	@sock contains the socket structure.
899  *	@sock contains the socket structure.
904  *	@sock contains the socket structure.
905  *	@level contains the protocol level to retrieve option from.
906  *	@optname contains the name of option to retrieve.
911  *	@sock contains the socket structure.
912  *	@level contains the protocol level to set options for.
913  *	@optname contains the name of the option to set.
918  *	@sock contains the socket structure.
919  *	@how contains the flag indicating how future sends and receives are handled.
926  *	@sk contains the sock (not socket) associated with the incoming sk_buff.
927  *	@skb contains the incoming network data.
983  *	@sk contains the newly created sock structure.
988  *	@sk contains the existing sock structure.
995  *	@sec_ctx contains the security context information being provided by
1001  *	@old_ctx contains an existing xfrm_sec_ctx.
1002  *	@new_ctxp contains a new xfrm_sec_ctx being cloned from old.
1003  *	Allocate a security structure in new_ctxp that contains the
1007  *	@ctx contains the xfrm_sec_ctx
1010  *	@ctx contains the xfrm_sec_ctx.
1013  *	@x contains the xfrm_state being added to the Security Association
1015  *	@sec_ctx contains the security context information being provided by
1017  *	@secid contains the secid from which to take the mls portion of the context.
1024  *	@x contains the xfrm_state.
1027  *	@x contains the xfrm_state.
1030  *	@ctx contains the xfrm_sec_ctx for which the access control is being
1032  *	@fl_secid contains the flow security label that is used to authorize
1034  *	@dir contains the direction of the flow (input or output).
1041  *	@x contains the state to match.
1042  *	@xp contains the policy to check for a match.
1043  *	@fl contains the flow to check for a match.
1087  *	@ipcp contains the kernel IPC permission structure
1088  *	@flag contains the desired (requested) permission set
1092  *	@ipcp contains the kernel IPC permission structure.
1093  *	@secid contains a pointer to the location where result will be saved.
1101  *	@msg contains the message structure to be modified.
1105  *	@msg contains the message structure to be modified.
1113  *	@msq contains the message queue structure to be modified.
1117  *	@msq contains the message queue structure to be modified.
1123  *	@msq contains the message queue to act upon.
1124  *	@msqflg contains the operation control flags.
1130  *	@msq contains the message queue to act upon.  May be NULL.
1131  *	@cmd contains the operation to be performed.
1136  *	@msq contains the message queue to send message to.
1137  *	@msg contains the message to be enqueued.
1138  *	@msqflg contains operational flags.
1142  *	queue, @msq.  The @target task structure contains a pointer to the
1145  *	@msq contains the message queue to retrieve message from.
1146  *	@msg contains the message destination.
1147  *	@target contains the task structure for recipient process.
1148  *	@type contains the type of message requested.
1149  *	@mode contains the operational flags.
1158  *	@shp contains the shared memory structure to be modified.
1162  *	@shp contains the shared memory structure to be modified.
1168  *	@shp contains the shared memory structure to be modified.
1169  *	@shmflg contains the operation control flags.
1175  *	@shp contains shared memory structure to be modified.
1176  *	@cmd contains the operation to be performed.
1182  *	@shp contains the shared memory structure to be modified.
1183  *	@shmaddr contains the address to attach memory region to.
1184  *	@shmflg contains the operational flags.
1193  *	@sma contains the semaphore structure
1197  *	@sma contains the semaphore structure.
1203  *	@sma contains the semaphore structure.
1204  *	@semflg contains the operation control flags.
1210  *	@sma contains the semaphore structure.  May be NULL.
1211  *	@cmd contains the operation to be performed.
1217  *	@sma contains the semaphore structure.
1218  *	@sops contains the operations to perform.
1219  *	@nsops contains the number of operations to perform.
1220  *	@alter contains the flag indicating whether changes are to be made.
1231  *	@child contains the task_struct structure for the target process.
1232  *	@mode contains the PTRACE_MODE flags indicating the form of access.
1240  *	@parent contains the task_struct structure for debugger process.
1247  *	@target contains the task_struct structure for target process.
1248  *	@effective contains the effective capability set.
1249  *	@inheritable contains the inheritable capability set.
1250  *	@permitted contains the permitted capability set.
1255  *	@new contains the new credentials structure for target process.
1256  *	@old contains the current credentials structure for target process.
1257  *	@effective contains the effective capability set.
1258  *	@inheritable contains the inheritable capability set.
1259  *	@permitted contains the permitted capability set.
1264  *	@cred contains the credentials to use.
1265  *	@ns contains the user namespace we want the capability in
1266  *	@cap contains the capability <include/linux/capability.h>.
1273  *	@type contains the type of action.
1279  *	@ts contains new time
1280  *	@tz contains new timezone
1284  *	@mm contains the mm struct it is being added to.
1285  *	@pages contains the number of pages.
1293  *	@secid contains the security ID.
1294  *	@secdata contains the pointer that stores the converted security context.
1295  *	@seclen pointer which contains the length of the data
1298  *	@secid contains the pointer to the generated security ID.
1299  *	@secdata contains the security context.
1303  *	@secdata contains the security context.
1304  *	@seclen contains the length of the security context.
1310  *	@field contains the required Audit action. Fields flags are defined in include/linux/audit.h
1311  *	@op contains the operator the rule uses.
1312  *	@rulestr contains the context where the rule will be applied to.
1313  *	@lsmrule contains a pointer to receive the result.
1318  *	Specifies whether given @rule contains any fields related to current LSM.
1319  *	@rule contains the audit rule of interest.
1325  *	@secid contains the security id in question.
1326  *	@field contains the field which relates to current LSM.
1327  *	@op contains the operator that will be used for matching.
1335  *	@rule contains the allocated rule
1348  * 	@ctx contains the string which we wish to set in the inode.
1349  * 	@ctxlen contains the length of @ctx.
1362  * 	@dentry contains the inode we wish to set the security context of.
1363  * 	@ctx contains the string which we wish to set in the inode.
1364  * 	@ctxlen contains the length of @ctx.