linux-6.8/security/security.c

881  * Return: Return 0 if permission is granted.
895  * Return: Returns 0 if permission is granted.
910  * Return: Returns 0 if permission is granted.
926  * Return: Returns 0 if permission is granted.
939  * Check permission before allowing the current process to trace the @child
946  * Return: Returns 0 if permission is granted.
957  * Check that the @parent process has sufficient permission to trace the
961  * Return: Returns 0 if permission is granted.
976  * @target process.  The hook may also perform permission checking to determine
1002  * Return: Returns 0 and update @new if permission is granted.
1043  * Return: Returns 0 if permission is granted.
1056  * Return: Returns 0 if permission is granted.
1067  * Check permission before accessing the kernel message ring or changing
1071  * Return: Return 0 if permission is granted.
1083  * Check permission to change the system time, struct timespec64 is defined in
1086  * Return: Returns 0 if permission is granted.
1103  * Return: Returns 0 if permission is granted by the LSM infrastructure to the
1141  * Return: Returns 0 if the hook is successful and permission is granted.
1165  * Return: Returns 0 if the hook is successful and permission is granted.
1182  * Return: Returns 0 if the hook is successful and permission is granted.
1390  * Return: Returns 0 if permission is granted.
1405  * Return: Returns 0 if permission is granted.
1430  * Check permission before obtaining filesystem statistics for the @mnt
1433  * Return: Returns 0 if permission is granted.
1441  * security_sb_mount() - Check permission for mounting a filesystem
1448  * Check permission before an object specified by @dev_name is mounted on the
1455  * Return: Returns 0 if permission is granted.
1464  * security_sb_umount() - Check permission for unmounting a filesystem
1468  * Check permission before the @mnt file system is unmounted.
1470  * Return: Returns 0 if permission is granted.
1482  * Check permission before pivoting the root filesystem.
1484  * Return: Returns 0 if permission is granted.
1540  * Check permission before a mount is moved.
1542  * Return: Returns 0 if permission is granted.
1559  * Return: Returns 0 if permission is granted.
1793  * Return: Returns 0 if permission is granted.
1812  * Return: Returns 0 if permission is granted.
1828  * Check the permission to remove a directory.
1830  * Return: Returns 0 if permission is granted.
1844  * Check the permission to remove a hard link to a file.
1846  * Return: Returns 0 if permission is granted.
1862  * Check the permission to create a symbolic link to a file.
1864  * Return: Returns 0 if permission is granted.
1880  * Check permission before creating a new hard link to a file.
1882  * Return: Returns 0 if permission is granted.
1900  * Check for permission to rename a file or directory.
1902  * Return: Returns 0 if permission is granted.
1922  * Check permission before truncating the file indicated by path.  Note that
1926  * Return: Returns 0 if permission is granted.
1940  * Check for permission to change a mode of the file @path. The new mode is
1944  * Return: Returns 0 if permission is granted.
1959  * Check for permission to change owner/group of a file or directory.
1961  * Return: Returns 0 if permission is granted.
1974  * Check for permission to change root directory.
1976  * Return: Returns 0 if permission is granted.
1990  * Check permission to create a regular file.
1992  * Return: Returns 0 if permission is granted.
2009  * Check permission before creating a new hard link to a file.
2011  * Return: Returns 0 if permission is granted.
2026  * Check the permission to remove a hard link to a file.
2028  * Return: Returns 0 if permission is granted.
2043  * Check the permission to create a symbolic link to a file.
2045  * Return: Returns 0 if permission is granted.
2064  * Return: Returns 0 if permission is granted.
2079  * Check the permission to remove a directory.
2081  * Return: Returns 0 if permission is granted.
2102  * Return: Returns 0 if permission is granted.
2120  * Check for permission to rename a file or directory.
2122  * Return: Returns 0 if permission is granted.
2148  * Check the permission to read the symbolic link.
2150  * Return: Returns 0 if permission is granted.
2165  * Check permission to follow a symbolic link when looking up a pathname.  If
2168  * Return: Returns 0 if permission is granted.
2183  * Check permission before accessing an inode.  This hook is called by the
2184  * existing Linux permission function, so a security module can use it to
2185  * provide additional checking for existing Linux permission checks.  Notice
2187  * operations), whereas the file_security_ops permission hook is called when
2190  * Return: Returns 0 if permission is granted.
2205  * Check permission before setting file attributes.  Note that the kernel call
2210  * Return: Returns 0 if permission is granted.
2230  * Check permission before obtaining file attributes.
2232  * Return: Returns 0 if permission is granted.
2250  * Check permission before setting the extended attributes.
2252  * Return: Returns 0 if permission is granted.
2286  * Check permission before setting posix acls, the posix acls in @kacl are
2289  * Return: Returns 0 if permission is granted.
2315  * Check permission before getting osix acls, the posix acls are identified by
2318  * Return: Returns 0 if permission is granted.
2334  * Check permission before removing posix acls, the posix acls are identified
2337  * Return: Returns 0 if permission is granted.
2379  * Check permission before obtaining the extended attributes identified by
2382  * Return: Returns 0 if permission is granted.
2395  * Check permission before obtaining the list of extended attribute names for
2398  * Return: Returns 0 if permission is granted.
2413  * Check permission before removing the extended attribute identified by @name
2416  * Return: Returns 0 if permission is granted.
2639  * Return: Returns 0 if permission is granted.
2664  * Return: Returns 0 if permission is granted.
2678  * Return: Return 0 if the hook is successful and permission is granted.
2717  * Check permission for an ioctl operation on @file.  Note that @arg sometimes
2722  * Return: Returns 0 if permission is granted.
2739  * Return: Returns 0 if permission is granted.
2790  * Return: Returns 0 if permission is granted.
2810  * Return: Returns 0 if permission is granted.
2825  * Return: Returns 0 if permission is granted.
2843  * Check permission before performing file locking operations.  Note the hook
2846  * Return: Returns 0 if permission is granted.
2859  * Check permission before allowing the file operation specified by @cmd from
2865  * Return: Returns 0 if permission is granted.
2892  * Check permission for the file owner @fown to send SIGIO or SIGURG to the
2898  * Return: Returns 0 if permission is granted.
2913  * Return: Returns 0 if permission is granted.
2924  * Save open-time permission checking state for later use upon file_permission,
2927  * Return: Returns 0 if permission is granted.
2944  * Check permission before truncating a file, i.e. using ftruncate.  Note that
2945  * truncation permission may also be checked based on the path, using the
2948  * Return: Returns 0 if permission is granted.
3143  * Return: Returns 0 if permission is granted.
3168  * Return: Returns 0 if permission is granted.
3189  * Return: Returns 0 if permission is granted.
3214  * Return: Returns 0 if permission is granted.
3292  * Check permission before setting the process group identifier of the process
3295  * Return: Returns 0 if permission is granted.
3306  * Check permission before getting the process group identifier of the process
3309  * Return: Returns 0 if permission is granted.
3320  * Check permission before getting the session identifier of the process @p.
3322  * Return: Returns 0 if permission is granted.
3363  * Check permission before setting the nice value of @p to @nice.
3365  * Return: Returns 0 if permission is granted.
3377  * Check permission before setting the ioprio value of @p to @ioprio.
3379  * Return: Returns 0 if permission is granted.
3390  * Check permission before getting the ioprio value of @p.
3392  * Return: Returns 0 if permission is granted.
3405  * Check permission before getting and/or setting the resource limits of
3408  * Return: Returns 0 if permission is granted.
3422  * Check permission before setting the resource limits of process @p for
3426  * Return: Returns 0 if permission is granted.
3438  * Check permission before setting scheduling policy and/or parameters of
3441  * Return: Returns 0 if permission is granted.
3452  * Check permission before obtaining scheduling information for process @p.
3454  * Return: Returns 0 if permission is granted.
3465  * Check permission before moving memory owned by process @p.
3467  * Return: Returns 0 if permission is granted.
3481  * Check permission before sending signal @sig to @p.  @info can be NULL, the
3487  * Return: Returns 0 if permission is granted.
3503  * Check permission before performing a process control operation on the
3544  * Check permission prior to creating a new user namespace.
3555  * @ipcp: ipc permission structure
3560  * Return: Returns 0 if permission is granted.
3569  * @ipcp: ipc permission structure
3588  * Return: Return 0 if operation was successful and permission is granted.
3617  * @msq: sysv ipc permission structure
3622  * Return: Returns 0 if operation was successful and permission is granted.
3638  * @msq: sysv ipc permission structure
3651  * @msq: sysv ipc permission structure
3654  * Check permission when a message queue is requested through the msgget system
3658  * Return: Return 0 if permission is granted.
3667  * @msq: sysv ipc permission structure
3670  * Check permission when a message control operation specified by @cmd is to be
3673  * Return: Returns 0 if permission is granted.
3682  * @msq: sysv ipc permission structure
3686  * Check permission before a message, @msg, is enqueued on the message queue
3689  * Return: Returns 0 if permission is granted.
3699  * @msq: sysv ipc permission structure
3705  * Check permission before a message, @msg, is removed from the message	queue.
3710  * Return: Returns 0 if permission is granted.
3720  * @shp: sysv ipc permission structure
3725  * Return: Returns 0 if operation was successful and permission is granted.
3741  * @shp: sysv ipc permission structure
3754  * @shp: sysv ipc permission structure
3757  * Check permission when a shared memory region is requested through the shmget
3762  * Return: Returns 0 if permission is granted.
3771  * @shp: sysv ipc permission structure
3774  * Check permission when a shared memory control operation specified by @cmd is
3777  * Return: Return 0 if permission is granted.
3786  * @shp: sysv ipc permission structure
3794  * Return: Returns 0 if permission is granted.
3804  * @sma: sysv ipc permission structure
3809  * Return: Returns 0 if operation was successful and permission is granted.
3825  * @sma: sysv ipc permission structure
3838  * @sma: sysv ipc permission structure
3841  * Check permission when a semaphore is requested through the semget system
3845  * Return: Returns 0 if permission is granted.
3854  * @sma: sysv ipc permission structure
3857  * Check permission when a semaphore operation specified by @cmd is to be
3860  * Return: Returns 0 if permission is granted.
3869  * @sma: sysv ipc permission structure
3877  * Return: Returns 0 if permission is granted.
4103  * Save security information for a netlink message so that permission checking
4286  * Return: Returns 0 if permission is granted.
4304  * Return: Returns 0 if permission is granted.
4326  * and permission hooks in inode_security_ops), binding and connecting to
4332  * Return: Returns 0 if permission is granted.
4353  * and permission hooks in inode_security_ops), binding and connecting to
4359  * Return: Returns 0 if permission is granted.
4376  * Return: Returns 0 if permission is granted.
4399  * Return: Returns 0 if permission is granted.
4415  * Return: Returns 0 if permission is granted and the connection was
4430  * Check permission before socket protocol layer bind operation is performed
4434  * Return: Returns 0 if permission is granted.
4448  * Check permission before socket protocol layer connect operation attempts to
4451  * Return: Returns 0 if permission is granted.
4464  * Check permission before socket protocol layer listen operation.
4466  * Return: Returns 0 if permission is granted.
4478  * Check permission before accepting a new connection.  Note that the new
4482  * Return: Returns 0 if permission is granted.
4495  * Check permission before transmitting a message to another socket.
4497  * Return: Returns 0 if permission is granted.
4511  * Check permission before receiving a message from a socket.
4513  * Return: Returns 0 if permission is granted.
4525  * Check permission before reading the local address (name) of the socket
4528  * Return: Returns 0 if permission is granted.
4539  * Check permission before the remote address (name) of a socket object.
4541  * Return: Returns 0 if permission is granted.
4557  * Return: Returns 0 if permission is granted.
4572  * Return: Returns 0 if permission is granted.
4584  * Checks permission before all or part of a connection on the socket @sock is
4587  * Return: Returns 0 if permission is granted.
4604  * Return: Returns 0 if permission is granted.
4768  * Return: Returns 0 if permission is granted.
4810  * Return: Returns 0 if permission is granted.
4872  * Return: Returns 0 if permission is granted.
4886  * Return: Returns 0 if permission is granted.
4902  * Return: Returns 0 if permission is granted.
4917  * Return: Returns 0 if permission is granted.
4988  * Return: Returns 0 if permission is granted.
5023  * Check permission to access a pkey when modifying a QP.
5025  * Return: Returns 0 if permission is granted.
5041  * Return: Returns 0 if permission is granted.
5132  * Return: Returns 0 if permission is granted.
5181  * Return: Returns 0 if permission is granted.
5205  * Check permission when a flow selects a xfrm_policy for processing XFRMs on a
5209  * Return: Return 0 if permission is granted, -ESRCH otherwise, or -errno on
5285  * Return: Return 0 if permission is granted, -ve error otherwise.
5312  * Return: Return 0 if permission is granted, -ve error otherwise.
5414  * Return: Returns 0 if permission is granted.
5429  * Return: Returns 0 if permission is granted.
5443  * Return: Returns 0 if permission is granted.
5506  * Return: Returns 0 if permission is granted.
5522  * Return: Returns 0 if permission is granted.
5559  * Return: Returns 0 if permission is granted.
5572  * Return: Returns 0 if permission is granted.
5588  * Return: Returns 0 if permission is granted.
5601  * Return: Returns 0 if permission is granted.
5614  * Return: Returns 0 if permission is granted.