linux-6.12.1/security/security.c

994  * Return: Return 0 if permission is granted.
1008  * Return: Returns 0 if permission is granted.
1023  * Return: Returns 0 if permission is granted.
1039  * Return: Returns 0 if permission is granted.
1052  * Check permission before allowing the current process to trace the @child
1059  * Return: Returns 0 if permission is granted.
1070  * Check that the @parent process has sufficient permission to trace the
1074  * Return: Returns 0 if permission is granted.
1089  * @target process.  The hook may also perform permission checking to determine
1114  * Return: Returns 0 and update @new if permission is granted.
1155  * Return: Returns 0 if permission is granted.
1168  * Return: Returns 0 if permission is granted.
1179  * Check permission before accessing the kernel message ring or changing
1183  * Return: Return 0 if permission is granted.
1195  * Check permission to change the system time, struct timespec64 is defined in
1198  * Return: Returns 0 if permission is granted.
1215  * Return: Returns 0 if permission is granted by the LSM infrastructure to the
1252  * Return: Returns 0 if the hook is successful and permission is granted.
1276  * Return: Returns 0 if the hook is successful and permission is granted.
1293  * Return: Returns 0 if the hook is successful and permission is granted.
1495  * Return: Returns 0 if permission is granted.
1510  * Return: Returns 0 if permission is granted.
1535  * Check permission before obtaining filesystem statistics for the @mnt
1538  * Return: Returns 0 if permission is granted.
1546  * security_sb_mount() - Check permission for mounting a filesystem
1553  * Check permission before an object specified by @dev_name is mounted on the
1560  * Return: Returns 0 if permission is granted.
1569  * security_sb_umount() - Check permission for unmounting a filesystem
1573  * Check permission before the @mnt file system is unmounted.
1575  * Return: Returns 0 if permission is granted.
1587  * Check permission before pivoting the root filesystem.
1589  * Return: Returns 0 if permission is granted.
1652  * Check permission before a mount is moved.
1654  * Return: Returns 0 if permission is granted.
1671  * Return: Returns 0 if permission is granted.
1888  * Return: Returns 0 if permission is granted.
1921  * Return: Returns 0 if permission is granted.
1937  * Check the permission to remove a directory.
1939  * Return: Returns 0 if permission is granted.
1953  * Check the permission to remove a hard link to a file.
1955  * Return: Returns 0 if permission is granted.
1971  * Check the permission to create a symbolic link to a file.
1973  * Return: Returns 0 if permission is granted.
1989  * Check permission before creating a new hard link to a file.
1991  * Return: Returns 0 if permission is granted.
2009  * Check for permission to rename a file or directory.
2011  * Return: Returns 0 if permission is granted.
2031  * Check permission before truncating the file indicated by path.  Note that
2035  * Return: Returns 0 if permission is granted.
2049  * Check for permission to change a mode of the file @path. The new mode is
2053  * Return: Returns 0 if permission is granted.
2068  * Check for permission to change owner/group of a file or directory.
2070  * Return: Returns 0 if permission is granted.
2083  * Check for permission to change root directory.
2085  * Return: Returns 0 if permission is granted.
2099  * Check permission to create a regular file.
2101  * Return: Returns 0 if permission is granted.
2133  * Check permission before creating a new hard link to a file.
2135  * Return: Returns 0 if permission is granted.
2150  * Check the permission to remove a hard link to a file.
2152  * Return: Returns 0 if permission is granted.
2167  * Check the permission to create a symbolic link to a file.
2169  * Return: Returns 0 if permission is granted.
2188  * Return: Returns 0 if permission is granted.
2203  * Check the permission to remove a directory.
2205  * Return: Returns 0 if permission is granted.
2226  * Return: Returns 0 if permission is granted.
2244  * Check for permission to rename a file or directory.
2246  * Return: Returns 0 if permission is granted.
2272  * Check the permission to read the symbolic link.
2274  * Return: Returns 0 if permission is granted.
2289  * Check permission to follow a symbolic link when looking up a pathname.  If
2292  * Return: Returns 0 if permission is granted.
2307  * Check permission before accessing an inode.  This hook is called by the
2308  * existing Linux permission function, so a security module can use it to
2309  * provide additional checking for existing Linux permission checks.  Notice
2311  * operations), whereas the file_security_ops permission hook is called when
2314  * Return: Returns 0 if permission is granted.
2329  * Check permission before setting file attributes.  Note that the kernel call
2334  * Return: Returns 0 if permission is granted.
2365  * Check permission before obtaining file attributes.
2367  * Return: Returns 0 if permission is granted.
2385  * This hook performs the desired permission checks before setting the extended
2400  * Return: Returns 0 if permission is granted.
2429  * Check permission before setting posix acls, the posix acls in @kacl are
2432  * Return: Returns 0 if permission is granted.
2466  * Check permission before getting osix acls, the posix acls are identified by
2469  * Return: Returns 0 if permission is granted.
2485  * Check permission before removing posix acls, the posix acls are identified
2488  * Return: Returns 0 if permission is granted.
2538  * Check permission before obtaining the extended attributes identified by
2541  * Return: Returns 0 if permission is granted.
2554  * Check permission before obtaining the list of extended attribute names for
2557  * Return: Returns 0 if permission is granted.
2572  * This hook performs the desired permission checks before setting the extended
2587  * Return: Returns 0 if permission is granted.
2812  * Return: Returns 0 if permission is granted.
2837  * Return: Returns 0 if permission is granted.
2851  * Return: Return 0 if the hook is successful and permission is granted.
2901  * Check permission for an ioctl operation on @file.  Note that @arg sometimes
2906  * Return: Returns 0 if permission is granted.
2923  * Return: Returns 0 if permission is granted.
2974  * Return: Returns 0 if permission is granted.
2989  * Return: Returns 0 if permission is granted.
3004  * Return: Returns 0 if permission is granted.
3017  * Check permission before performing file locking operations.  Note the hook
3020  * Return: Returns 0 if permission is granted.
3033  * Check permission before allowing the file operation specified by @cmd from
3039  * Return: Returns 0 if permission is granted.
3068  * Check permission for the file owner @fown to send SIGIO or SIGURG to the
3074  * Return: Returns 0 if permission is granted.
3089  * Return: Returns 0 if permission is granted.
3100  * Save open-time permission checking state for later use upon file_permission,
3103  * Return: Returns 0 if permission is granted.
3125  * Return: Returns 0 if permission is granted.
3137  * Check permission before truncating a file, i.e. using ftruncate.  Note that
3138  * truncation permission may also be checked based on the path, using the
3141  * Return: Returns 0 if permission is granted.
3331  * Return: Returns 0 if permission is granted.
3351  * Return: Returns 0 if permission is granted.
3367  * Return: Returns 0 if permission is granted.
3387  * Return: Returns 0 if permission is granted.
3459  * Check permission before setting the process group identifier of the process
3462  * Return: Returns 0 if permission is granted.
3473  * Check permission before getting the process group identifier of the process
3476  * Return: Returns 0 if permission is granted.
3487  * Check permission before getting the session identifier of the process @p.
3489  * Return: Returns 0 if permission is granted.
3530  * Check permission before setting the nice value of @p to @nice.
3532  * Return: Returns 0 if permission is granted.
3544  * Check permission before setting the ioprio value of @p to @ioprio.
3546  * Return: Returns 0 if permission is granted.
3557  * Check permission before getting the ioprio value of @p.
3559  * Return: Returns 0 if permission is granted.
3572  * Check permission before getting and/or setting the resource limits of
3575  * Return: Returns 0 if permission is granted.
3589  * Check permission before setting the resource limits of process @p for
3593  * Return: Returns 0 if permission is granted.
3605  * Check permission before setting scheduling policy and/or parameters of
3608  * Return: Returns 0 if permission is granted.
3619  * Check permission before obtaining scheduling information for process @p.
3621  * Return: Returns 0 if permission is granted.
3632  * Check permission before moving memory owned by process @p.
3634  * Return: Returns 0 if permission is granted.
3648  * Check permission before sending signal @sig to @p.  @info can be NULL, the
3654  * Return: Returns 0 if permission is granted.
3670  * Check permission before performing a process control operation on the
3711  * Check permission prior to creating a new user namespace.
3722  * @ipcp: ipc permission structure
3727  * Return: Returns 0 if permission is granted.
3736  * @ipcp: ipc permission structure
3755  * Return: Return 0 if operation was successful and permission is granted.
3784  * @msq: sysv ipc permission structure
3789  * Return: Returns 0 if operation was successful and permission is granted.
3805  * @msq: sysv ipc permission structure
3818  * @msq: sysv ipc permission structure
3821  * Check permission when a message queue is requested through the msgget system
3825  * Return: Return 0 if permission is granted.
3834  * @msq: sysv ipc permission structure
3837  * Check permission when a message control operation specified by @cmd is to be
3840  * Return: Returns 0 if permission is granted.
3849  * @msq: sysv ipc permission structure
3853  * Check permission before a message, @msg, is enqueued on the message queue
3856  * Return: Returns 0 if permission is granted.
3866  * @msq: sysv ipc permission structure
3872  * Check permission before a message, @msg, is removed from the message	queue.
3877  * Return: Returns 0 if permission is granted.
3887  * @shp: sysv ipc permission structure
3892  * Return: Returns 0 if operation was successful and permission is granted.
3908  * @shp: sysv ipc permission structure
3921  * @shp: sysv ipc permission structure
3924  * Check permission when a shared memory region is requested through the shmget
3929  * Return: Returns 0 if permission is granted.
3938  * @shp: sysv ipc permission structure
3941  * Check permission when a shared memory control operation specified by @cmd is
3944  * Return: Return 0 if permission is granted.
3953  * @shp: sysv ipc permission structure
3961  * Return: Returns 0 if permission is granted.
3971  * @sma: sysv ipc permission structure
3976  * Return: Returns 0 if operation was successful and permission is granted.
3992  * @sma: sysv ipc permission structure
4005  * @sma: sysv ipc permission structure
4008  * Check permission when a semaphore is requested through the semget system
4012  * Return: Returns 0 if permission is granted.
4021  * @sma: sysv ipc permission structure
4024  * Check permission when a semaphore operation specified by @cmd is to be
4027  * Return: Returns 0 if permission is granted.
4036  * @sma: sysv ipc permission structure
4044  * Return: Returns 0 if permission is granted.
4270  * Save security information for a netlink message so that permission checking
4428  * Return: Returns 0 if permission is granted.
4446  * Return: Returns 0 if permission is granted.
4468  * and permission hooks in inode_security_ops), binding and connecting to
4474  * Return: Returns 0 if permission is granted.
4495  * and permission hooks in inode_security_ops), binding and connecting to
4501  * Return: Returns 0 if permission is granted.
4518  * Return: Returns 0 if permission is granted.
4541  * Return: Returns 0 if permission is granted.
4557  * Return: Returns 0 if permission is granted and the connection was
4572  * Check permission before socket protocol layer bind operation is performed
4576  * Return: Returns 0 if permission is granted.
4590  * Check permission before socket protocol layer connect operation attempts to
4593  * Return: Returns 0 if permission is granted.
4606  * Check permission before socket protocol layer listen operation.
4608  * Return: Returns 0 if permission is granted.
4620  * Check permission before accepting a new connection.  Note that the new
4624  * Return: Returns 0 if permission is granted.
4637  * Check permission before transmitting a message to another socket.
4639  * Return: Returns 0 if permission is granted.
4653  * Check permission before receiving a message from a socket.
4655  * Return: Returns 0 if permission is granted.
4667  * Check permission before reading the local address (name) of the socket
4670  * Return: Returns 0 if permission is granted.
4681  * Check permission before the remote address (name) of a socket object.
4683  * Return: Returns 0 if permission is granted.
4699  * Return: Returns 0 if permission is granted.
4714  * Return: Returns 0 if permission is granted.
4726  * Checks permission before all or part of a connection on the socket @sock is
4729  * Return: Returns 0 if permission is granted.
4746  * Return: Returns 0 if permission is granted.
4909  * Return: Returns 0 if permission is granted.
4951  * Return: Returns 0 if permission is granted.
5024  * Return: Returns 0 if permission is granted.
5038  * Return: Returns 0 if permission is granted.
5054  * Return: Returns 0 if permission is granted.
5069  * Return: Returns 0 if permission is granted.
5139  * Return: Returns 0 if permission is granted.
5174  * Check permission to access a pkey when modifying a QP.
5176  * Return: Returns 0 if permission is granted.
5192  * Return: Returns 0 if permission is granted.
5293  * Return: Returns 0 if permission is granted.
5342  * Return: Returns 0 if permission is granted.
5366  * Check permission when a flow selects a xfrm_policy for processing XFRMs on a
5370  * Return: Return 0 if permission is granted, -ESRCH otherwise, or -errno on
5445  * Return: Return 0 if permission is granted, -ve error otherwise.
5480  * Return: Return 0 if permission is granted, -ve error otherwise.
5603  * Return: Returns 0 if permission is granted.
5618  * Return: Returns 0 if permission is granted.
5632  * Return: Returns 0 if permission is granted.
5764  * Return: Returns 0 if permission is granted.
5859  * Return: Returns 0 if permission is granted.
5909  * Return: Returns 0 if permission is granted.
5922  * Return: Returns 0 if permission is granted.
5938  * Return: Returns 0 if permission is granted.
5951  * Return: Returns 0 if permission is granted.
5964  * Return: Returns 0 if permission is granted.