may_change_ptraced

函数名称：may_change_ptraced_domain - check if can change profile on ptraced task*@to_label: profile to change to (NOT NULL)*@info: message if there is an error* Check if current is ptraced and if so if the tracing task is allowed* to trace the new domain* Returns:

函数原型：static int may_change_ptraced_domain(struct aa_label *to_label, const char **info)

返回类型：int

参数：

类型	参数	名称
struct aa_label *	to_label
const char **	info

struct aa_label * tracerl = NULL

error等于0

_read_lock() - mark the beginning of an RCU read-side critical section* When synchronize_rcu() is invoked on one CPU while other CPUs* are within RCU read-side critical sections, then the* synchronize_rcu() is guaranteed to block until after all the other

tracer等于ptrace_parent - return the task that is tracing the given task*@task: task to consider* Returns %NULL if no one is tracing @task, or the &struct task_struct* pointer to its tracer.* Must called under rcu_read_lock(). The pointer returned might be kept

如果tracer则tracerl等于aa_get_task_label - Get another task's label*@task: task to query (NOT NULL)* Returns: counted reference to @task's label

如果非tracer或unconfined(tracerl)则转到:out

error等于aa_may_ptrace - test if tracer task can trace the tracee*@tracer: label of the task doing the tracing (NOT NULL)*@tracee: task label to be traced*@request: permission request* Returns: %0 else error code if permission denied or error

out :

_read_unlock() - marks the end of an RCU read-side critical section.* In most situations, rcu_read_unlock() is immune from deadlock.* However, in kernels built with CONFIG_RCU_BOOST, rcu_read_unlock()

aa_put_label(tracerl)

如果error则info等于"ptrace prevents transition"

返回:error

**调用者**
名称	描述
apparmor_bprm_set_creds	apparmor_bprm_set_creds - set the new creds on the bprm struct@bprm: binprm for the exec (NOT NULL) Returns: %0 or error on failure* TODO: once the other paths are done see if we can't refactor into a fn
aa_change_hat	aa_change_hat - change hat to/from subprofile@hats: vector of hat names to try changing into (MAYBE NULL if @count == 0)@count: number of hat names in @hats@token: magic value to validate the hat change@flags: flags affecting behavior of the change
aa_change_profile	aa_change_profile - perform a one-way profile transition@fqname: name of profile may include namespace (NOT NULL)@onexec: whether this transition is to take place immediately or at exec*@flags: flags affecting change behavior

源代码转换工具开放的插件接口	X
支持：c/c++/esqlc/java Oracle/Informix/Mysql 插件可实现：逻辑报告代码生成和批量转换代码

函数逻辑报告