linux-6.8/security/security.c

186 /* Is an LSM allowed to be initialized? */
193 	/* Not allowed if another exclusive LSM already initialized. */  in lsm_allowed()
879  * Check whether @mgr is allowed to be the binder context manager.
889  * security_binder_transaction() - Check if a binder transaction is allowed
893  * Check whether @from is allowed to invoke a binder transaction call to @to.
904  * security_binder_transfer_binder() - Check if a binder transfer is allowed
908  * Check whether @from is allowed to transfer a binder reference to @to.
919  * security_binder_transfer_file() - Check if a binder file xfer is allowed
924  * Check whether @from is allowed to transfer @file to @to.
935  * security_ptrace_access_check() - Check if tracing is allowed
954  * security_ptrace_traceme() - Check if tracing is allowed
977  * if the current process is allowed to see the capability sets of the @target
1035  * security_quotactl() - Check if a quotactl() syscall is allowed for this fs
1041  * Check whether the quotactl syscall is allowed for this @sb.
1051  * security_quota_on() - Check if QUOTAON is allowed for a dentry
1054  * Check whether QUOTAON is allowed for @dentry.
1064  * security_syslog() - Check if accessing the kernel message ring is allowed
1079  * security_settime64() - Check if changing the system time is allowed
1094  * security_vm_enough_memory_mm() - Check if allocating a new mem map is allowed
1366  * security_sb_mnt_opts_compat() - Check if new mount options are allowed
1370  * Determine if the new mount options in @mnt_opts are allowed given the
1400  * security_sb_kern_mount() - Check if a kernel mount is allowed
1403  * Mount this @sb if allowed by permissions.
1427  * security_sb_statfs() - Check if accessing fs stats is allowed
1551  * security_path_notify() - Check if setting a watch is allowed
1784  * security_path_mknod() - Check if creating a special file is allowed
1805  * security_path_mkdir() - Check if creating a new directory is allowed
1824  * security_path_rmdir() - Check if removing a directory is allowed
1840  * security_path_unlink() - Check if removing a hard link is allowed
1857  * security_path_symlink() - Check if creating a symbolic link is allowed
1875  * security_path_link - Check if creating a hard link is allowed
1893  * security_path_rename() - Check if renaming a file is allowed
1919  * security_path_truncate() - Check if truncating a file is allowed
1936  * security_path_chmod() - Check if changing the file's mode is allowed
1954  * security_path_chown() - Check if changing the file's owner/group is allowed
1971  * security_path_chroot() - Check if changing the root directory is allowed
1985  * security_inode_create() - Check if creating a file is allowed
2004  * security_inode_link() - Check if creating a hard link is allowed
2022  * security_inode_unlink() - Check if removing a hard link is allowed
2038  * security_inode_symlink() - Check if creating a symbolic link is allowed
2056  * security_inode_mkdir() - Check if creation a new director is allowed
2075  * security_inode_rmdir() - Check if removing a directory is allowed
2091  * security_inode_mknod() - Check if creating a special file is allowed
2113  * security_inode_rename() - Check if renaming a file is allowed
2145  * security_inode_readlink() - Check if reading a symbolic link is allowed
2160  * security_inode_follow_link() - Check if following a symbolic link is allowed
2179  * security_inode_permission() - Check if accessing an inode is allowed
2200  * security_inode_setattr() - Check if setting file attributes is allowed
2227  * security_inode_getattr() - Check if getting file attributes is allowed
2242  * security_inode_setxattr() - Check if setting file xattrs is allowed
2280  * security_inode_set_acl() - Check if setting posix acls is allowed
2310  * security_inode_get_acl() - Check if reading posix acls is allowed
2329  * security_inode_remove_acl() - Check if removing a posix acl is allowed
2375  * security_inode_getxattr() - Check if xattr access is allowed
2392  * security_inode_listxattr() - Check if listing xattrs is allowed
2408  * security_inode_removexattr() - Check if removing an xattr is allowed
2712  * security_file_ioctl() - Check if an ioctl is allowed
2731  * security_file_ioctl_compat() - Check if an ioctl is allowed in compat mode
2782  * security_mmap_file() - Check if mmap'ing a file is allowed
2805  * security_mmap_addr() - Check if mmap'ing an address is allowed
2818  * security_file_mprotect() - Check if changing memory protections is allowed
2839  * security_file_lock() - Check if a file lock is allowed
2854  * security_file_fcntl() - Check if fcntl() op is allowed
2887  * security_file_send_sigiotask() - Check if sending SIGIO/SIGURG is allowed
2907  * security_file_receive() - Check is receiving a file via IPC is allowed
2941  * security_file_truncate() - Check if truncating a file is allowed
3117  * security_kernel_module_request() - Check is loading a module is allowed
3288  * security_task_setpgid() - Check if setting the pgid is allowed
3303  * security_task_getpgid() - Check if getting the pgid is allowed
3317  * security_task_getsid() - Check if getting the session id is allowed
3359  * security_task_setnice() - Check if setting a task's nice value is allowed
3373  * security_task_setioprio() - Check if setting a task's ioprio is allowed
3387  * security_task_getioprio() - Check if getting a task's ioprio is allowed
3400  * security_task_prlimit() - Check if get/setting resources limits is allowed
3417  * security_task_setrlimit() - Check if setting a new rlimit value is allowed
3435  * security_task_setscheduler() - Check if setting sched policy/param is allowed
3449  * security_task_getscheduler() - Check if getting scheduling info is allowed
3462  * security_task_movememory() - Check if moving memory is allowed
3475  * security_task_kill() - Check if sending a signal is allowed
3496  * security_task_prctl() - Check if a prctl op is allowed
3541  * security_create_user_ns() - Check if creating a new userns is allowed
3554  * security_ipc_permission() - Check if sysv ipc access is allowed
3650  * security_msg_queue_associate() - Check if a msg queue operation is allowed
3666  * security_msg_queue_msgctl() - Check if a msg queue operation is allowed
3681  * security_msg_queue_msgsnd() - Check if sending a sysv ipc message is allowed
3698  * security_msg_queue_msgrcv() - Check if receiving a sysv ipc msg is allowed
3753  * security_shm_associate() - Check if a sysv shm operation is allowed
3770  * security_shm_shmctl() - Check if a sysv shm operation is allowed
3785  * security_shm_shmat() - Check if a sysv shm attach operation is allowed
3837  * security_sem_associate() - Check if a sysv semaphore operation is allowed
3853  * security_sem_semctl() - Check if a sysv semaphore operation is allowed
3868  * security_sem_semop() - Check if a sysv semaphore operation is allowed
3890  * Fill in @inode security information for a @dentry if allowed.
4057  * Read attribute @name for task @p and store it into @value if allowed.
4082  * allowed.
4099  * security_netlink_send() - Save info and check if netlink sending is allowed
4109  *         allowed to be transmitted.
4298  * security_watch_key() - Check if a task is allowed to watch for key events
4301  * Check to see if a process is allowed to watch for event notifications from
4314  * security_unix_stream_connect() - Check if a AF_UNIX stream is allowed
4368  * security_socket_create() - Check if creating a new socket is allowed
4409  * security_socket_socketpair() - Check if creating a socketpair is allowed
4425  * security_socket_bind() - Check if a socket bind operation is allowed
4443  * security_socket_connect() - Check if a socket connect operation is allowed
4460  * security_socket_listen() - Check if a socket is allowed to listen
4474  * security_socket_accept() - Check if a socket is allowed to accept connections
4490  * security_socket_sendmsg() - Check is sending a message is allowed
4505  * security_socket_recvmsg() - Check if receiving a message is allowed
4522  * security_socket_getsockname() - Check if reading the socket addr is allowed
4536  * security_socket_getpeername() - Check if reading the peer's addr is allowed
4549  * security_socket_getsockopt() - Check if reading a socket option is allowed
4565  * security_socket_setsockopt() - Check if setting a socket option is allowed
4580  * security_socket_shutdown() - Checks if shutting down the socket is allowed
4595  * security_sock_rcv_skb() - Check if an incoming network packet is allowed
4805  * security_secmark_relabel_packet() - Check if setting a secmark is allowed
4808  * Check if the process should be allowed to relabel packets to @secid.
4868  * security_tun_dev_create() - Check if creating a TUN device is allowed
4881  * security_tun_dev_attach_queue() - Check if attaching a TUN queue is allowed
5018  * security_ib_pkey_access() - Check if access to an IB pkey is allowed
5034  * security_ib_endport_manage_subnet() - Check if SMPs traffic is allowed
5127  * security_xfrm_policy_delete() - Check if deleting a xfrm policy is allowed
5176  * security_xfrm_state_delete() - Check if deleting a xfrm state is allowed
5201  * security_xfrm_policy_lookup() - Check if using a xfrm policy is allowed
5305  * security_key_permission() - Check if a kernel key operation is allowed
5405  * security_bpf() - Check if the bpf syscall operation is allowed
5422  * security_bpf_map() - Check if access to a bpf map is allowed
5437  * security_bpf_prog() - Check if access to a bpf program is allowed
5500  * security_locked_down() - Check if a kernel feature is allowed
5516  * security_perf_event_open() - Check if a perf event open is allowed
5520  * Check whether the @type of perf_event_open syscall is allowed.
5554  * security_perf_event_read() - Check if reading a perf event label is allowed
5557  * Read perf_event security info if allowed.
5567  * security_perf_event_write() - Check if writing a perf event label is allowed
5570  * Write perf_event security info if allowed.
5582  * security_uring_override_creds() - Check if overriding creds is allowed
5585  * Check if the current task, executing an io_uring operation, is allowed to
5596  * security_uring_sqpoll() - Check if IORING_SETUP_SQPOLL is allowed
5598  * Check whether the current task is allowed to spawn a io_uring polling thread
5609  * security_uring_cmd() - Check if a io_uring passthrough command is allowed
5612  * Check whether the file_operations uring_cmd is allowed to run.