include/linux/lsm_hooks.h

45  *	@bprm contains the linux_binprm structure.
60  *	@bprm contains the linux_binprm structure.
68  *	@bprm contains the linux_binprm structure.
109  *	@sb contains the super_block structure to be modified.
113  *	@sb contains the super_block structure to be modified.
130  *	@dev_name contains the name for object being mounted.
131  *	@path contains the path for mount point object.
132  *	@type contains the filesystem type.
133  *	@flags contains the mount flags.
134  *	@data contains the filesystem-specific data.
149  *	@data contains the filesystem-specific data.
157  *	@mnt contains the mounted file system.
158  *	@flags contains the unmount flags, e.g. MNT_FORCE.
162  *	@old_path contains the path for the new location of the
164  *	@new_path contains the path for the new root (new_root).
210  *	@inode contains the inode structure.
213  *	@inode contains the inode structure.
227  *	@inode contains the inode structure of the newly created inode.
228  *	@dir contains the inode structure of the parent directory.
229  *	@qstr contains the last path component of the new object
240  *      @inode contains the inode structure
247  *	@dir contains inode structure of the parent of the new file.
248  *	@dentry contains the dentry structure for the file to be created.
249  *	@mode contains the file mode of the file to be created.
253  *	@old_dentry contains the dentry structure for an existing
255  *	@dir contains the inode structure of the parent directory
257  *	@new_dentry contains the dentry structure for the new link.
261  *	@old_dentry contains the dentry structure for an existing link
263  *	@new_dir contains the path structure of the parent directory of
265  *	@new_dentry contains the dentry structure for the new link.
269  *	@dir contains the inode structure of parent directory of the file.
270  *	@dentry contains the dentry structure for file to be unlinked.
274  *	@dir contains the path structure of parent directory of the file.
275  *	@dentry contains the dentry structure for file to be unlinked.
279  *	@dir contains the inode structure of parent directory of
281  *	@dentry contains the dentry structure of the symbolic link.
282  *	@old_name contains the pathname of file.
286  *	@dir contains the path structure of parent directory of
288  *	@dentry contains the dentry structure of the symbolic link.
289  *	@old_name contains the pathname of file.
294  *	@dir contains the inode structure of parent of the directory
296  *	@dentry contains the dentry structure of new directory.
297  *	@mode contains the mode of new directory.
302  *	@dir contains the path structure of parent of the directory
304  *	@dentry contains the dentry structure of new directory.
305  *	@mode contains the mode of new directory.
309  *	@dir contains the inode structure of parent of the directory
311  *	@dentry contains the dentry structure of directory to be removed.
315  *	@dir contains the path structure of parent of the directory to be
317  *	@dentry contains the dentry structure of directory to be removed.
324  *	@dir contains the inode structure of parent of the new file.
325  *	@dentry contains the dentry structure of the new file.
326  *	@mode contains the mode of the new file.
327  *	@dev contains the device number.
332  *	@dir contains the path structure of parent of the new file.
333  *	@dentry contains the dentry structure of the new file.
334  *	@mode contains the mode of the new file.
335  *	@dev contains the undecoded device number. Use new_decode_dev() to get
340  *	@old_dir contains the inode structure for parent of the old link.
341  *	@old_dentry contains the dentry structure of the old link.
342  *	@new_dir contains the inode structure for parent of the new link.
343  *	@new_dentry contains the dentry structure of the new link.
347  *	@old_dir contains the path structure for parent of the old link.
348  *	@old_dentry contains the dentry structure of the old link.
349  *	@new_dir contains the path structure for parent of the new link.
350  *	@new_dentry contains the dentry structure of the new link.
355  *	@path contains the path structure of the file to change the mode.
356  *	@mode contains the new DAC's permission, which is a bitmask of
361  *	@path contains the path structure.
362  *	@uid contains new owner's ID.
363  *	@gid contains new group's ID.
367  *	@path contains the path structure.
374  *	@dentry contains the dentry structure for the file link.
378  *	@dentry contains the dentry structure for the link.
379  *	@inode contains the inode, which itself is not stable in RCU-walk
389  *	@inode contains the inode structure to check.
390  *	@mask contains the permission mask.
397  *	@dentry contains the dentry structure for the file.
402  *	@path contains the path structure for the file.
406  *	@path contains the path structure for the file.
461  *	@inode contains a pointer to the inode.
462  *	@secid contains a pointer to the location where result will be saved.
513  *	@file contains the file structure being accessed.
514  *	@mask contains the requested permissions.
520  *	@file contains the file structure to secure.
524  *	@file contains the file structure being modified.
526  *	@file contains the file structure.
527  *	@cmd contains the operation to perform.
528  *	@arg contains the operational arguments.
536  *	@addr contains virtual address that will be used for the operation.
541  *	@file contains the file structure for file to map (may be NULL).
542  *	@reqprot contains the protection requested by the application.
543  *	@prot contains the protection that will be applied by the kernel.
544  *	@flags contains the operational flags.
548  *	@vma contains the memory region to modify.
549  *	@reqprot contains the protection requested by the application.
550  *	@prot contains the protection that will be applied by the kernel.
555  *	@file contains the file structure.
556  *	@cmd contains the posix-translated lock operation to perform
565  *	@file contains the file structure.
566  *	@cmd contains the operation to be performed.
567  *	@arg contains the operational arguments.
572  *	@file contains the file structure to update.
580  *	@tsk contains the structure of task receiving signal.
581  *	@fown contains the file owner information.
587  *	@file contains the file structure being received.
598  *	@clone_flags contains the flags indicating what should be shared.
624  *	@c contains the credentials, secid will be placed into @secid.
660  *	@file contains the file structure pointing to the file being read
667  *	@file contains the file structure pointing to the file being read
682  *	@flags contains one of the LSM_SETID_* values.
691  *	@flags contains one of the LSM_SETID_* values.
696  *	@p contains the task_struct for process being modified.
697  *	@pgid contains the new pgid.
702  *	@p contains the task_struct for the process.
707  *	@p contains the task_struct for the process.
711  *	@p contains the task_struct for the process and place is into @secid.
716  *	@p contains the task_struct of process.
717  *	@nice contains the new nice value.
721  *	@p contains the task_struct of process.
722  *	@ioprio contains the new ioprio value
726  *	@p contains the task_struct of process.
733  *	@flags contains the LSM_PRLIMIT_* flag bits indicating whether the
741  *	@resource contains the resource whose limit is being set.
742  *	@new_rlim contains the new limits for @resource.
747  *	@p contains the task_struct for process.
752  *	@p contains the task_struct for process.
756  *	@p contains the task_struct for process.
765  *	@p contains the task_struct for process.
766  *	@info contains the signal information.
767  *	@sig contains the signal value.
768  *	@cred contains the cred of the process where the signal originated, or
774  *	@option contains the operation.
775  *	@arg2 contains a argument.
776  *	@arg3 contains a argument.
777  *	@arg4 contains a argument.
778  *	@arg5 contains a argument.
784  *	@p contains the task_struct for the task.
785  *	@inode contains the inode structure for the inode.
796  *	@skb contains the sk_buff structure for the netlink message.
805  *	@sock contains the sock structure.
806  *	@other contains the peer sock structure.
807  *	@newsk contains the new sock structure.
812  *	@sock contains the socket structure.
813  *	@other contains the peer socket structure.
830  *	@family contains the requested protocol family.
831  *	@type contains the requested communications type.
832  *	@protocol contains the requested protocol.
844  *	@sock contains the newly created socket structure.
845  *	@family contains the requested protocol family.
846  *	@type contains the requested communications type.
847  *	@protocol contains the requested protocol.
851  *	@socka contains the first socket structure.
852  *	@sockb contains the second socket structure.
858  *	@sock contains the socket structure.
859  *	@address contains the address to bind to.
860  *	@addrlen contains the length of address.
865  *	@sock contains the socket structure.
866  *	@address contains the address of remote endpoint.
867  *	@addrlen contains the length of address.
871  *	@sock contains the socket structure.
872  *	@backlog contains the maximum length for the pending connection queue.
878  *	@sock contains the listening socket structure.
879  *	@newsock contains the newly created server socket for connection.
883  *	@sock contains the socket structure.
884  *	@msg contains the message to be transmitted.
885  *	@size contains the size of message.
889  *	@sock contains the socket structure.
890  *	@msg contains the message structure.
891  *	@size contains the size of message structure.
892  *	@flags contains the operational flags.
897  *	@sock contains the socket structure.
902  *	@sock contains the socket structure.
907  *	@sock contains the socket structure.
908  *	@level contains the protocol level to retrieve option from.
909  *	@optname contains the name of option to retrieve.
914  *	@sock contains the socket structure.
915  *	@level contains the protocol level to set options for.
916  *	@optname contains the name of the option to set.
921  *	@sock contains the socket structure.
922  *	@how contains the flag indicating how future sends and receives
930  *	@sk contains the sock (not socket) associated with the incoming sk_buff.
931  *	@skb contains the incoming network data.
952  *	@sock contains the peer socket. May be NULL.
1001  *	@sk contains the existing sock structure.
1053  *	@sec contains the security structure to be freed.
1060  *	@sec_ctx contains the security context information being provided by
1067  *	@old_ctx contains an existing xfrm_sec_ctx.
1068  *	@new_ctxp contains a new xfrm_sec_ctx being cloned from old.
1069  *	Allocate a security structure in new_ctxp that contains the
1073  *	@ctx contains the xfrm_sec_ctx
1076  *	@ctx contains the xfrm_sec_ctx.
1079  *	@x contains the xfrm_state being added to the Security Association
1081  *	@sec_ctx contains the security context information being provided by
1088  *	@x contains the xfrm_state being added to the Security Association
1090  *	@polsec contains the policy's security context.
1091  *	@secid contains the secid from which to take the mls portion of the
1098  *	@x contains the xfrm_state.
1101  *	@x contains the xfrm_state.
1104  *	@ctx contains the xfrm_sec_ctx for which the access control is being
1106  *	@fl_secid contains the flow security label that is used to authorize
1108  *	@dir contains the direction of the flow (input or output).
1115  *	@x contains the state to match.
1116  *	@xp contains the policy to check for a match.
1117  *	@flic contains the flowi_common struct to check for a match.
1161  *	@ipcp contains the kernel IPC permission structure
1162  *	@flag contains the desired (requested) permission set
1166  *	@ipcp contains the kernel IPC permission structure.
1167  *	@secid contains a pointer to the location where result will be saved.
1176  *	@msg contains the message structure to be modified.
1180  *	@msg contains the message structure to be modified.
1188  *	@perm contains the IPC permissions of the message queue.
1192  *	@perm contains the IPC permissions of the message queue.
1198  *	@perm contains the IPC permissions of the message queue.
1199  *	@msqflg contains the operation control flags.
1205  *	@perm contains the IPC permissions of the msg queue. May be NULL.
1206  *	@cmd contains the operation to be performed.
1211  *	@perm contains the IPC permissions of the message queue.
1212  *	@msg contains the message to be enqueued.
1213  *	@msqflg contains operational flags.
1217  *	queue. The @target task structure contains a pointer to the
1220  *	@perm contains the IPC permissions of the message queue.
1221  *	@msg contains the message destination.
1222  *	@target contains the task structure for recipient process.
1223  *	@type contains the type of message requested.
1224  *	@mode contains the operational flags.
1233  *	@perm contains the IPC permissions of the shared memory structure.
1237  *	@perm contains the IPC permissions of the shared memory structure.
1243  *	@perm contains the IPC permissions of the shared memory structure.
1244  *	@shmflg contains the operation control flags.
1250  *	@perm contains the IPC permissions of the shared memory structure.
1251  *	@cmd contains the operation to be performed.
1257  *	@perm contains the IPC permissions of the shared memory structure.
1258  *	@shmaddr contains the address to attach memory region to.
1259  *	@shmflg contains the operational flags.
1268  *	@perm contains the IPC permissions of the semaphore.
1272  *	@perm contains the IPC permissions of the semaphore.
1278  *	@perm contains the IPC permissions of the semaphore.
1279  *	@semflg contains the operation control flags.
1285  *	@perm contains the IPC permissions of the semaphore. May be NULL.
1286  *	@cmd contains the operation to be performed.
1292  *	@perm contains the IPC permissions of the semaphore.
1293  *	@sops contains the operations to perform.
1294  *	@nsops contains the number of operations to perform.
1295  *	@alter contains the flag indicating whether changes are to be made.
1300  *	@mgr contains the struct cred for the current binder process.
1305  *	@from contains the struct cred for the sending process.
1306  *	@to contains the struct cred for the receiving process.
1309  *	@from contains the struct cred for the sending process.
1310  *	@to contains the struct cred for the receiving process.
1313  *	@from contains the struct cred for the sending process.
1314  *	@file contains the struct file being transferred.
1315  *	@to contains the struct cred for the receiving process.
1325  *	@child contains the task_struct structure for the target process.
1326  *	@mode contains the PTRACE_MODE flags indicating the form of access.
1332  *	@parent contains the task_struct structure for debugger process.
1339  *	@target contains the task_struct structure for target process.
1340  *	@effective contains the effective capability set.
1341  *	@inheritable contains the inheritable capability set.
1342  *	@permitted contains the permitted capability set.
1347  *	@new contains the new credentials structure for target process.
1348  *	@old contains the current credentials structure for target process.
1349  *	@effective contains the effective capability set.
1350  *	@inheritable contains the inheritable capability set.
1351  *	@permitted contains the permitted capability set.
1356  *	@cred contains the credentials to use.
1357  *	@ns contains the user namespace we want the capability in
1358  *	@cap contains the capability <include/linux/capability.h>.
1359  *	@opts contains options for the capable check <include/linux/security.h>
1369  *	@type contains the SYSLOG_ACTION_* constant from <include/linux/syslog.h>
1375  *	@ts contains new time
1376  *	@tz contains new timezone
1380  *	@mm contains the mm struct it is being added to.
1381  *	@pages contains the number of pages.
1397  *	@secid contains the security ID.
1398  *	@secdata contains the pointer that stores the converted security
1400  *	@seclen pointer which contains the length of the data
1403  *	@secid contains the pointer to the generated security ID.
1404  *	@secdata contains the security context.
1408  *	@secdata contains the security context.
1409  *	@seclen contains the length of the security context.
1415  *	@field contains the required Audit action.
1417  *	@op contains the operator the rule uses.
1418  *	@rulestr contains the context where the rule will be applied to.
1419  *	@lsmrule contains a pointer to receive the result.
1424  *	Specifies whether given @krule contains any fields related to
1426  *	@krule contains the audit rule of interest.
1432  *	@secid contains the security id in question.
1433  *	@field contains the field which relates to current LSM.
1434  *	@op contains the operator that will be used for matching.
1441  *	@lsmrule contains the allocated rule
1456  *	@ctx contains the string which we wish to set in the inode.
1457  *	@ctxlen contains the length of @ctx.
1468  *	@dentry contains the inode we wish to set the security context of.
1469  *	@ctx contains the string which we wish to set in the inode.
1470  *	@ctxlen contains the length of @ctx.