函数逻辑报告

Linux Kernel

v5.5.9

Brick Technologies Co., Ltd

Source Code:security\yama\yama_lsm.c Create Date:2022-07-27 21:49:31
Last Modify:2020-03-12 14:18:49 Copyright©Brick
首页 函数Tree
注解内核,赢得工具下载SCCTEnglish

函数名称：yama_ptrace_access_check - validate PTRACE_ATTACH calls*@child: task that current task is attempting to ptrace*@mode: ptrace attach mode* Returns 0 if following the ptrace is allowed, -ve on error.

函数原型：static int yama_ptrace_access_check(struct task_struct *child, unsigned int mode)

返回类型：int

参数：

类型参数名称
struct task_struct *child
unsigned intmode
357  rc等于0
360  如果mode按位与PTRACE_MODE_ATTACH则
362  当:ptrace_scope恒等于YAMA_SCOPE_DISABLED
364  退出
365  当:ptrace_scope恒等于YAMA_SCOPE_RELATIONAL
366  _read_lock() - mark the beginning of an RCU read-side critical section* When synchronize_rcu() is invoked on one CPU while other CPUs* are within RCU read-side critical sections, then the* synchronize_rcu() is guaranteed to block until after all the other
367  如果非pid_alive - check that a task structure is not stale*@p: Task structure to be checked.* Test if a process is not yet dead (at most zombie state)* If pid_alive fails, then pointers within the task structure* can be stale and must not be dereferenced.则rc等于负EPERM
369  如果非rc且非ask_is_descendant - walk up a process family tree looking for a match*@parent: the process to compare against while walking up from child*@child: the process to start from while looking upwards for parent且非ptracer_exception_found - tracer registered as exception for this tracee*@tracer: the task_struct of the process attempting ptrace*@tracee: the task_struct of the process to be ptraced* Returns 1 if tracer has a ptracer exception ancestor for tracee.且非ns_capable(user_ns, Allow ptrace() of any process )则rc等于负EPERM
373  _read_unlock() - marks the end of an RCU read-side critical section.* In most situations, rcu_read_unlock() is immune from deadlock.* However, in kernels built with CONFIG_RCU_BOOST, rcu_read_unlock()
374  退出
375  当:ptrace_scope恒等于YAMA_SCOPE_CAPABILITY
376  _read_lock() - mark the beginning of an RCU read-side critical section* When synchronize_rcu() is invoked on one CPU while other CPUs* are within RCU read-side critical sections, then the* synchronize_rcu() is guaranteed to block until after all the other
377  如果非ns_capable(user_ns, Allow ptrace() of any process )则rc等于负EPERM
379  _read_unlock() - marks the end of an RCU read-side critical section.* In most situations, rcu_read_unlock() is immune from deadlock.* However, in kernels built with CONFIG_RCU_BOOST, rcu_read_unlock()
380  退出
381  当:ptrace_scope恒等于YAMA_SCOPE_NO_ATTACH
382  默认
383  rc等于负EPERM
384  退出
388  如果rc且mode按位与PTRACE_MODE_NOAUDIT的值恒等于0则defers execution because cmdline access can sleep
391  返回:rc