函数逻辑报告 |
Source Code:security\selinux\hooks.c |
Create Date:2022-07-27 20:30:05 |
| Last Modify:2020-03-12 14:18:49 | Copyright©Brick |
| 首页 | 函数Tree |
| 注解内核,赢得工具 | 下载SCCT | English |
函数名称:selinux_path_notify
函数原型:static int selinux_path_notify(const struct path *path, u64 mask, unsigned int obj_type)
返回类型:int
参数:
| 类型 | 参数 | 名称 |
|---|---|---|
| const struct path * | path | |
| u64 | mask | |
| unsigned int | obj_type |
| 3308 | type等于LSM_AUDIT_DATA_PATH |
| 3316 | 当:obj_type恒等于FSNOTIFY_OBJ_TYPE_VFSMOUNT |
| 3317 | perm等于FILE__WATCH_MOUNT |
| 3318 | 退出 |
| 3319 | 当:obj_type恒等于FSNOTIFY_OBJ_TYPE_SB |
| 3320 | perm等于FILE__WATCH_SB |
| 3325 | 退出 |
| 3326 | 当:obj_type恒等于FSNOTIFY_OBJ_TYPE_INODE |
| 3327 | perm等于FILE__WATCH |
| 3328 | 退出 |
| 3329 | 默认 |
| 3330 | 返回:负EINVAL |
| 3334 | 如果mask按位与ALL_FSNOTIFY_PERM_EVENTS则perm或等于FILE__WATCH_WITH_PERM |
| 3338 | 如果mask按位与File was accessed 按位或access event in a permissions hook 按位或Unwrittable file closed 的值则perm或等于FILE__WATCH_READS |
| 源代码转换工具 开放的插件接口 | X |
|---|---|
| 支持:c/c++/esqlc/java Oracle/Informix/Mysql 插件可实现:逻辑报告 代码生成和批量转换代码 |