函数逻辑报告

Linux Kernel

v5.5.9

Brick Technologies Co., Ltd

Source Code:security\device_cgroup.c Create Date:2022-07-27 21:52:06
Last Modify:2020-03-12 14:18:49 Copyright©Brick
首页 函数Tree
注解内核,赢得工具下载SCCTEnglish

函数名称：match_exception_partial - iterates the exception list trying to find a partial match*@exceptions: list of exceptions*@type: device type (DEVCG_DEV_BLOCK or DEVCG_DEV_CHAR)*@major: device file major number, ~0 to match all*@minor: device file minor number,

函数原型：static bool match_exception_partial(struct list_head *exceptions, short type, unsigned int major, unsigned int minor, short access)

返回类型：bool

参数：

类型参数名称
struct list_head *exceptions
shorttype
unsigned intmajor
unsigned intminor
shortaccess
356  如果type按位与DEVCG_DEV_BLOCK且非type按位与DEVCG_DEV_BLOCK的值则继续下一循环
358  如果type按位与DEVCG_DEV_CHAR且非type按位与DEVCG_DEV_CHAR的值则继续下一循环
364  如果major不等于0的反且major不等于0的反且major不等于major则继续下一循环
366  如果minor不等于0的反且minor不等于0的反且minor不等于minor则继续下一循环
373  如果非access按位与access的值则继续下一循环
375  返回:true
377  返回:false
调用者
名称描述
verify_new_exverify_new_ex - verifies if a new exception is allowed by parent cgroup's permissions*@dev_cgroup: dev cgroup to be tested against*@refex: new exception*@behavior: behavior of the exception's dev_cgroup* This is used to make sure a child cgroup won't have
parent_allows_removalparent_allows_removal - verify if it's ok to remove an exception*@childcg: child cgroup from where the exception will be removed*@ex: exception being removed* When removing an exception in cgroups with default ALLOW policy, it must* be checked if removing
__devcgroup_check_permission__devcgroup_check_permission - checks if an inode operation is permitted*@dev_cgroup: the dev cgroup to be tested against*@type: device type*@major: device major number*@minor: device minor number*@access: combination of DEVCG_ACC_WRITE, DEVCG_ACC_READ