linux/security/security.c

167 /* Is an LSM allowed to be initialized? */
174 	/* Not allowed if another exclusive LSM already initialized. */  in lsm_allowed()
794  * Check whether @mgr is allowed to be the binder context manager.
804  * security_binder_transaction() - Check if a binder transaction is allowed
808  * Check whether @from is allowed to invoke a binder transaction call to @to.
819  * security_binder_transfer_binder() - Check if a binder transfer is allowed
823  * Check whether @from is allowed to transfer a binder reference to @to.
834  * security_binder_transfer_file() - Check if a binder file xfer is allowed
839  * Check whether @from is allowed to transfer @file to @to.
850  * security_ptrace_access_check() - Check if tracing is allowed
869  * security_ptrace_traceme() - Check if tracing is allowed
892  * if the current process is allowed to see the capability sets of the @target
950  * security_quotactl() - Check if a quotactl() syscall is allowed for this fs
956  * Check whether the quotactl syscall is allowed for this @sb.
966  * security_quota_on() - Check if QUOTAON is allowed for a dentry
969  * Check whether QUOTAON is allowed for @dentry.
979  * security_syslog() - Check if accessing the kernel message ring is allowed
994  * security_settime64() - Check if changing the system time is allowed
1009  * security_vm_enough_memory_mm() - Check if allocating a new mem map is allowed
1281  * security_sb_mnt_opts_compat() - Check if new mount options are allowed
1285  * Determine if the new mount options in @mnt_opts are allowed given the
1315  * security_sb_kern_mount() - Check if a kernel mount is allowed
1318  * Mount this @sb if allowed by permissions.
1342  * security_sb_statfs() - Check if accessing fs stats is allowed
1466  * security_path_notify() - Check if setting a watch is allowed
1699  * security_path_mknod() - Check if creating a special file is allowed
1720  * security_path_mkdir() - Check if creating a new directory is allowed
1739  * security_path_rmdir() - Check if removing a directory is allowed
1755  * security_path_unlink() - Check if removing a hard link is allowed
1772  * security_path_symlink() - Check if creating a symbolic link is allowed
1790  * security_path_link - Check if creating a hard link is allowed
1808  * security_path_rename() - Check if renaming a file is allowed
1834  * security_path_truncate() - Check if truncating a file is allowed
1851  * security_path_chmod() - Check if changing the file's mode is allowed
1869  * security_path_chown() - Check if changing the file's owner/group is allowed
1886  * security_path_chroot() - Check if changing the root directory is allowed
1900  * security_inode_create() - Check if creating a file is allowed
1919  * security_inode_link() - Check if creating a hard link is allowed
1937  * security_inode_unlink() - Check if removing a hard link is allowed
1953  * security_inode_symlink() - Check if creating a symbolic link is allowed
1971  * security_inode_mkdir() - Check if creation a new director is allowed
1990  * security_inode_rmdir() - Check if removing a directory is allowed
2006  * security_inode_mknod() - Check if creating a special file is allowed
2028  * security_inode_rename() - Check if renaming a file is allowed
2060  * security_inode_readlink() - Check if reading a symbolic link is allowed
2075  * security_inode_follow_link() - Check if following a symbolic link is allowed
2094  * security_inode_permission() - Check if accessing an inode is allowed
2115  * security_inode_setattr() - Check if setting file attributes is allowed
2142  * security_inode_getattr() - Check if getting file attributes is allowed
2157  * security_inode_setxattr() - Check if setting file xattrs is allowed
2195  * security_inode_set_acl() - Check if setting posix acls is allowed
2225  * security_inode_get_acl() - Check if reading posix acls is allowed
2244  * security_inode_remove_acl() - Check if removing a posix acl is allowed
2290  * security_inode_getxattr() - Check if xattr access is allowed
2307  * security_inode_listxattr() - Check if listing xattrs is allowed
2323  * security_inode_removexattr() - Check if removing an xattr is allowed
2633  * security_file_ioctl() - Check if an ioctl is allowed
2652  * security_file_ioctl_compat() - Check if an ioctl is allowed in compat mode
2703  * security_mmap_file() - Check if mmap'ing a file is allowed
2726  * security_mmap_addr() - Check if mmap'ing an address is allowed
2739  * security_file_mprotect() - Check if changing memory protections is allowed
2760  * security_file_lock() - Check if a file lock is allowed
2775  * security_file_fcntl() - Check if fcntl() op is allowed
2808  * security_file_send_sigiotask() - Check if sending SIGIO/SIGURG is allowed
2828  * security_file_receive() - Check is receiving a file via IPC is allowed
2862  * security_file_truncate() - Check if truncating a file is allowed
3038  * security_kernel_module_request() - Check is loading a module is allowed
3209  * security_task_setpgid() - Check if setting the pgid is allowed
3224  * security_task_getpgid() - Check if getting the pgid is allowed
3238  * security_task_getsid() - Check if getting the session id is allowed
3280  * security_task_setnice() - Check if setting a task's nice value is allowed
3294  * security_task_setioprio() - Check if setting a task's ioprio is allowed
3308  * security_task_getioprio() - Check if getting a task's ioprio is allowed
3321  * security_task_prlimit() - Check if get/setting resources limits is allowed
3338  * security_task_setrlimit() - Check if setting a new rlimit value is allowed
3356  * security_task_setscheduler() - Check if setting sched policy/param is allowed
3370  * security_task_getscheduler() - Check if getting scheduling info is allowed
3383  * security_task_movememory() - Check if moving memory is allowed
3396  * security_task_kill() - Check if sending a signal is allowed
3417  * security_task_prctl() - Check if a prctl op is allowed
3462  * security_create_user_ns() - Check if creating a new userns is allowed
3475  * security_ipc_permission() - Check if sysv ipc access is allowed
3571  * security_msg_queue_associate() - Check if a msg queue operation is allowed
3587  * security_msg_queue_msgctl() - Check if a msg queue operation is allowed
3602  * security_msg_queue_msgsnd() - Check if sending a sysv ipc message is allowed
3619  * security_msg_queue_msgrcv() - Check if receiving a sysv ipc msg is allowed
3674  * security_shm_associate() - Check if a sysv shm operation is allowed
3691  * security_shm_shmctl() - Check if a sysv shm operation is allowed
3706  * security_shm_shmat() - Check if a sysv shm attach operation is allowed
3758  * security_sem_associate() - Check if a sysv semaphore operation is allowed
3774  * security_sem_semctl() - Check if a sysv semaphore operation is allowed
3789  * security_sem_semop() - Check if a sysv semaphore operation is allowed
3811  * Fill in @inode security information for a @dentry if allowed.
3828  * Read attribute @name for task @p and store it into @value if allowed.
3853  * allowed.
3871  * security_netlink_send() - Save info and check if netlink sending is allowed
3881  *         allowed to be transmitted.
4070  * security_watch_key() - Check if a task is allowed to watch for key events
4073  * Check to see if a process is allowed to watch for event notifications from
4086  * security_unix_stream_connect() - Check if a AF_UNIX stream is allowed
4140  * security_socket_create() - Check if creating a new socket is allowed
4181  * security_socket_socketpair() - Check if creating a socketpair is allowed
4197  * security_socket_bind() - Check if a socket bind operation is allowed
4215  * security_socket_connect() - Check if a socket connect operation is allowed
4232  * security_socket_listen() - Check if a socket is allowed to listen
4246  * security_socket_accept() - Check if a socket is allowed to accept connections
4262  * security_socket_sendmsg() - Check is sending a message is allowed
4277  * security_socket_recvmsg() - Check if receiving a message is allowed
4294  * security_socket_getsockname() - Check if reading the socket addr is allowed
4308  * security_socket_getpeername() - Check if reading the peer's addr is allowed
4321  * security_socket_getsockopt() - Check if reading a socket option is allowed
4337  * security_socket_setsockopt() - Check if setting a socket option is allowed
4352  * security_socket_shutdown() - Checks if shutting down the socket is allowed
4367  * security_sock_rcv_skb() - Check if an incoming network packet is allowed
4577  * security_secmark_relabel_packet() - Check if setting a secmark is allowed
4580  * Check if the process should be allowed to relabel packets to @secid.
4640  * security_tun_dev_create() - Check if creating a TUN device is allowed
4653  * security_tun_dev_attach_queue() - Check if attaching a TUN queue is allowed
4790  * security_ib_pkey_access() - Check if access to an IB pkey is allowed
4806  * security_ib_endport_manage_subnet() - Check if SMPs traffic is allowed
4899  * security_xfrm_policy_delete() - Check if deleting a xfrm policy is allowed
4948  * security_xfrm_state_delete() - Check if deleting a xfrm state is allowed
4973  * security_xfrm_policy_lookup() - Check if using a xfrm policy is allowed
5077  * security_key_permission() - Check if a kernel key operation is allowed
5179  * security_bpf() - Check if the bpf syscall operation is allowed
5196  * security_bpf_map() - Check if access to a bpf map is allowed
5211  * security_bpf_prog() - Check if access to a bpf program is allowed
5274  * security_locked_down() - Check if a kernel feature is allowed
5290  * security_perf_event_open() - Check if a perf event open is allowed
5294  * Check whether the @type of perf_event_open syscall is allowed.
5328  * security_perf_event_read() - Check if reading a perf event label is allowed
5331  * Read perf_event security info if allowed.
5341  * security_perf_event_write() - Check if writing a perf event label is allowed
5344  * Write perf_event security info if allowed.
5356  * security_uring_override_creds() - Check if overriding creds is allowed
5359  * Check if the current task, executing an io_uring operation, is allowed to
5370  * security_uring_sqpoll() - Check if IORING_SETUP_SQPOLL is allowed
5372  * Check whether the current task is allowed to spawn a io_uring polling thread
5383  * security_uring_cmd() - Check if a io_uring passthrough command is allowed
5386  * Check whether the file_operations uring_cmd is allowed to run.