Lines Matching refs:sksec
4557 struct sk_security_struct *sksec = sk->sk_security; in sock_has_perm() local
4561 if (sksec->sid == SECINITSID_KERNEL) in sock_has_perm()
4569 current_sid(), sksec->sid, sksec->sclass, perms, in sock_has_perm()
4598 struct sk_security_struct *sksec; in selinux_socket_post_create() local
4614 sksec = sock->sk->sk_security; in selinux_socket_post_create()
4615 sksec->sclass = sclass; in selinux_socket_post_create()
4616 sksec->sid = sid; in selinux_socket_post_create()
4618 if (sksec->sclass == SECCLASS_SCTP_SOCKET) in selinux_socket_post_create()
4619 sksec->sctp_assoc_state = SCTP_ASSOC_UNSET; in selinux_socket_post_create()
4646 struct sk_security_struct *sksec = sk->sk_security; in selinux_socket_bind() local
4720 sksec->sid, sid, in selinux_socket_bind()
4721 sksec->sclass, in selinux_socket_bind()
4728 switch (sksec->sclass) { in selinux_socket_bind()
4760 sksec->sid, sid, in selinux_socket_bind()
4761 sksec->sclass, node_perm, &ad); in selinux_socket_bind()
4769 if (sksec->sclass == SECCLASS_SCTP_SOCKET) in selinux_socket_bind()
4781 struct sk_security_struct *sksec = sk->sk_security; in selinux_socket_connect_helper() local
4800 if (sksec->sclass == SECCLASS_TCP_SOCKET || in selinux_socket_connect_helper()
4801 sksec->sclass == SECCLASS_DCCP_SOCKET || in selinux_socket_connect_helper()
4802 sksec->sclass == SECCLASS_SCTP_SOCKET) { in selinux_socket_connect_helper()
4832 if (sksec->sclass == SECCLASS_SCTP_SOCKET) in selinux_socket_connect_helper()
4842 switch (sksec->sclass) { in selinux_socket_connect_helper()
4859 sksec->sid, sid, sksec->sclass, perm, &ad); in selinux_socket_connect_helper()
5037 struct sk_security_struct *sksec = sk->sk_security; in selinux_sock_rcv_skb_compat() local
5038 u32 sk_sid = sksec->sid; in selinux_sock_rcv_skb_compat()
5059 err = selinux_netlbl_sock_rcv_skb(sksec, skb, family, &ad); in selinux_sock_rcv_skb_compat()
5062 err = selinux_xfrm_sock_rcv_skb(sksec->sid, skb, &ad); in selinux_sock_rcv_skb_compat()
5070 struct sk_security_struct *sksec = sk->sk_security; in selinux_socket_sock_rcv_skb() local
5072 u32 sk_sid = sksec->sid; in selinux_socket_sock_rcv_skb()
5144 struct sk_security_struct *sksec = sock->sk->sk_security; in selinux_socket_getpeersec_stream() local
5147 if (sksec->sclass == SECCLASS_UNIX_STREAM_SOCKET || in selinux_socket_getpeersec_stream()
5148 sksec->sclass == SECCLASS_TCP_SOCKET || in selinux_socket_getpeersec_stream()
5149 sksec->sclass == SECCLASS_SCTP_SOCKET) in selinux_socket_getpeersec_stream()
5150 peer_sid = sksec->peer_sid; in selinux_socket_getpeersec_stream()
5204 struct sk_security_struct *sksec; in selinux_sk_alloc_security() local
5206 sksec = kzalloc(sizeof(*sksec), priority); in selinux_sk_alloc_security()
5207 if (!sksec) in selinux_sk_alloc_security()
5210 sksec->peer_sid = SECINITSID_UNLABELED; in selinux_sk_alloc_security()
5211 sksec->sid = SECINITSID_UNLABELED; in selinux_sk_alloc_security()
5212 sksec->sclass = SECCLASS_SOCKET; in selinux_sk_alloc_security()
5213 selinux_netlbl_sk_security_reset(sksec); in selinux_sk_alloc_security()
5214 sk->sk_security = sksec; in selinux_sk_alloc_security()
5221 struct sk_security_struct *sksec = sk->sk_security; in selinux_sk_free_security() local
5224 selinux_netlbl_sk_security_free(sksec); in selinux_sk_free_security()
5225 kfree(sksec); in selinux_sk_free_security()
5230 struct sk_security_struct *sksec = sk->sk_security; in selinux_sk_clone_security() local
5233 newsksec->sid = sksec->sid; in selinux_sk_clone_security()
5234 newsksec->peer_sid = sksec->peer_sid; in selinux_sk_clone_security()
5235 newsksec->sclass = sksec->sclass; in selinux_sk_clone_security()
5245 struct sk_security_struct *sksec = sk->sk_security; in selinux_sk_getsecid() local
5247 *secid = sksec->sid; in selinux_sk_getsecid()
5255 struct sk_security_struct *sksec = sk->sk_security; in selinux_sock_graft() local
5259 isec->sid = sksec->sid; in selinux_sock_graft()
5260 sksec->sclass = isec->sclass; in selinux_sock_graft()
5270 struct sk_security_struct *sksec = ep->base.sk->sk_security; in selinux_sctp_assoc_request() local
5296 if (sksec->sctp_assoc_state == SCTP_ASSOC_UNSET) { in selinux_sctp_assoc_request()
5297 sksec->sctp_assoc_state = SCTP_ASSOC_SET; in selinux_sctp_assoc_request()
5304 sksec->peer_sid = peer_sid; in selinux_sctp_assoc_request()
5305 } else if (sksec->peer_sid != peer_sid) { in selinux_sctp_assoc_request()
5313 sksec->peer_sid, peer_sid, sksec->sclass, in selinux_sctp_assoc_request()
5325 err = selinux_conn_sid(sksec->sid, peer_sid, &conn_sid); in selinux_sctp_assoc_request()
5421 struct sk_security_struct *sksec = sk->sk_security; in selinux_sctp_sk_clone() local
5432 newsksec->sclass = sksec->sclass; in selinux_sctp_sk_clone()
5439 struct sk_security_struct *sksec = sk->sk_security; in selinux_inet_conn_request() local
5448 err = selinux_conn_sid(sksec->sid, peersid, &connsid); in selinux_inet_conn_request()
5477 struct sk_security_struct *sksec = sk->sk_security; in selinux_inet_conn_established() local
5483 selinux_skb_peerlbl_sid(skb, family, &sksec->peer_sid); in selinux_inet_conn_established()
5561 struct sk_security_struct *sksec = sk->sk_security; in selinux_tun_dev_attach() local
5570 sksec->sid = tunsec->sid; in selinux_tun_dev_attach()
5571 sksec->sclass = SECCLASS_TUN_SOCKET; in selinux_tun_dev_attach()
5687 struct sk_security_struct *sksec; in selinux_ip_output() local
5705 sksec = sk->sk_security; in selinux_ip_output()
5706 sid = sksec->sid; in selinux_ip_output()
5736 struct sk_security_struct *sksec; in selinux_ip_postroute_compat() local
5744 sksec = sk->sk_security; in selinux_ip_postroute_compat()
5755 sksec->sid, skb->secmark, in selinux_ip_postroute_compat()
5759 if (selinux_xfrm_postroute_last(sksec->sid, skb, &ad, proto)) in selinux_ip_postroute_compat()
5834 struct sk_security_struct *sksec; in selinux_ip_postroute() local
5836 sksec = sk->sk_security; in selinux_ip_postroute()
5859 if (selinux_conn_sid(sksec->sid, skb_sid, &peer_sid)) in selinux_ip_postroute()
5865 struct sk_security_struct *sksec = sk->sk_security; in selinux_ip_postroute() local
5866 peer_sid = sksec->sid; in selinux_ip_postroute()
5930 struct sk_security_struct *sksec = sk->sk_security; in selinux_netlink_send() local
5931 u16 sclass = sksec->sclass; in selinux_netlink_send()