📦 linux-manual

S (continued)

• security_initcall_subsys(9)Run the LSM subsys initcalls✨
• security_initramfs_populated(9)Notify LSMs that initramfs has been loaded✨
• security_inode_alloc(9)Allocate an inode LSM blob✨
• security_inode_copy_up(9)Create new creds for an overlayfs copy-up op✨
• security_inode_copy_up_xattr(9)Filter xattrs in an overlayfs copy-up op✨
• security_inode_create(9)Check if creating a file is allowed✨
• security_inode_file_getattr(9)check if retrieving fsxattr is allowed✨
• security_inode_file_setattr(9)check if setting fsxattr is allowed✨
• security_inode_follow_link(9)Check if following a symbolic link is allowed✨
• security_inode_free(9)Free an inode's LSM blob✨
• security_inode_get_acl(9)Check if reading posix acls is allowed✨
• security_inode_getattr(9)Check if getting file attributes is allowed✨
• security_inode_getlsmprop(9)Get an inode's LSM data✨
• security_inode_getsecctx(9)Get the security label of an inode✨
• security_inode_getsecurity(9)Get the xattr security label of an inode✨
• security_inode_getxattr(9)Check if xattr access is allowed✨
• security_inode_init_security(9)Initialize an inode's LSM context✨
• security_inode_init_security_anon(9)Initialize an anonymous inode✨
• security_inode_invalidate_secctx(9)Invalidate an inode's security label✨
• security_inode_killpriv(9)The setuid bit is removed, update LSM state✨
• security_inode_link(9)Check if creating a hard link is allowed✨
• security_inode_listsecurity(9)List the xattr security label names✨
• security_inode_listxattr(9)Check if listing xattrs is allowed✨
• security_inode_mkdir(9)Check if creating a new directory is allowed✨
• security_inode_mknod(9)Check if creating a special file is allowed✨
• security_inode_need_killpriv(9)Check if security_inode_killpriv() required✨
• security_inode_notifysecctx(9)Notify the LSM of an inode's security label✨
• security_inode_permission(9)Check if accessing an inode is allowed✨
• security_inode_post_create_tmpfile(9)Update inode security of new tmpfile✨
• security_inode_post_remove_acl(9)Update inode security after rm posix acls✨
• security_inode_post_removexattr(9)Update the inode after a removexattr op✨
• security_inode_post_set_acl(9)Update inode security from posix acls set✨
• security_inode_post_setattr(9)Update the inode after a setattr operation✨
• security_inode_post_setxattr(9)Update the inode after a setxattr operation✨
• security_inode_readlink(9)Check if reading a symbolic link is allowed✨
• security_inode_remove_acl(9)Check if removing a posix acl is allowed✨
• security_inode_removexattr(9)Check if removing an xattr is allowed✨
• security_inode_rename(9)Check if renaming a file is allowed✨
• security_inode_rmdir(9)Check if removing a directory is allowed✨
• security_inode_set_acl(9)Check if setting posix acls is allowed✨
• security_inode_setattr(9)Check if setting file attributes is allowed✨
• security_inode_setintegrity(9)Set the inode's integrity data✨
• security_inode_setsecctx(9)Change the security label of an inode✨
• security_inode_setsecurity(9)Set the xattr security label of an inode✨
• security_inode_setxattr(9)Check if setting file xattrs is allowed✨
• security_inode_symlink(9)Check if creating a symbolic link is allowed✨
• security_inode_unlink(9)Check if removing a hard link is allowed✨
• security_ipc_getlsmprop(9)Get the sysv ipc object LSM data✨
• security_ipc_permission(9)Check if sysv ipc access is allowed✨
• security_ismaclabel(9)Check if the named attribute is a MAC label✨
• security_kernel_act_as(9)Set the kernel credentials to act as secid✨
• security_kernel_create_files_as(9)Set file creation context using an inode✨
• security_kernel_load_data(9)Load data provided by userspace✨
• security_kernel_module_request(9)Check if loading a module is allowed✨
• security_kernel_post_load_data(9)Load userspace data from a non-file source✨
• security_kernel_post_read_file(9)Read a file specified by userspace✨
• security_kernel_read_file(9)Read a file specified by userspace✨
• security_kernfs_init_security(9)Init LSM context for a kernfs node✨
• security_key_alloc(9)Allocate and initialize a kernel key LSM blob✨
• security_key_free(9)Free a kernel key LSM blob✨
• security_key_getsecurity(9)Get the key's security label✨
• security_key_permission(9)Check if a kernel key operation is allowed✨
• security_key_post_create_or_update(9)Notification of key create or update✨
• security_load_policy(9)Load a security policy configuration.✨
• security_locked_down(9)Check if a kernel feature is allowed✨
• security_lsmprop_to_secctx(9)Convert a lsm_prop to a secctx✨
• security_member_sid(9)Compute the SID for member selection.✨
• security_mmap_addr(9)Check if mmap'ing an address is allowed✨
• security_mmap_backing_file(9)Check if mmap'ing a backing file is allowed✨
• security_mmap_file(9)Check if mmap'ing a file is allowed✨
• security_move_mount(9)Check permissions for moving a mount✨
• security_mptcp_add_subflow(9)Inherit the LSM label from the MPTCP socket✨
• security_msg_msg_alloc(9)Allocate a sysv ipc message LSM blob✨
• security_msg_msg_free(9)Free a sysv ipc message LSM blob✨
• security_msg_queue_alloc(9)Allocate a sysv ipc msg queue LSM blob✨
• security_msg_queue_associate(9)Check if a msg queue operation is allowed✨
• security_msg_queue_free(9)Free a sysv ipc msg queue LSM blob✨
• security_msg_queue_msgctl(9)Check if a msg queue operation is allowed✨
• security_msg_queue_msgrcv(9)Check if receiving a sysv ipc msg is allowed✨
• security_msg_queue_msgsnd(9)Check if sending a sysv ipc message is allowed✨
• security_net_peersid_resolve(9)Compare and resolve two network peer SIDs✨
• security_netif_sid(9)Obtain the SID for a network interface.✨
• security_netlbl_cache_add(9)Add an entry to the NetLabel cache✨
• security_netlbl_secattr_to_sid(9)Convert a NetLabel secattr to a SELinux SID✨
• security_netlbl_sid_to_secattr(9)Convert a SELinux SID to a NetLabel secattr✨
• security_netlink_send(9)Save info and check if netlink sending is allowed✨
• security_node_sid(9)Obtain the SID for a node (host).✨
• security_path_chmod(9)Check if changing the file's mode is allowed✨
• security_path_chown(9)Check if changing the file's owner/group is allowed✨
• security_path_chroot(9)Check if changing the root directory is allowed✨
• security_path_link(9)Check if creating a hard link is allowed✨
• security_path_mkdir(9)Check if creating a new directory is allowed✨
• security_path_mknod(9)Check if creating a special file is allowed✨
• security_path_notify(9)Check if setting a watch is allowed✨
• security_path_post_mknod(9)Update inode security after reg file creation✨
• security_path_rename(9)Check if renaming a file is allowed✨
• security_path_rmdir(9)Check if removing a directory is allowed✨
• security_path_symlink(9)Check if creating a symbolic link is allowed✨
• security_path_truncate(9)Check if truncating a file is allowed✨
• security_path_unlink(9)Check if removing a hard link is allowed✨
• security_perf_event_alloc(9)Allocate a perf event LSM blob✨
• security_perf_event_free(9)Free a perf event LSM blob✨
• security_perf_event_open(9)Check if a perf event open is allowed✨
• security_perf_event_read(9)Check if reading a perf event label is allowed✨
• security_perf_event_write(9)Check if writing a perf event label is allowed✨
• security_policycap_supported(9)Check for a specific policy capability✨
• security_port_sid(9)Obtain the SID for a port.✨
• security_post_notification(9)Check if a watch notification can be posted✨
• security_prepare_creds(9)Prepare a new set of credentials✨
• security_ptrace_access_check(9)Check if tracing is allowed✨
• security_ptrace_traceme(9)Check if tracing is allowed✨
• security_quota_on(9)Check if QUOTAON is allowed for a dentry✨
• security_quotactl(9)Check if a quotactl() syscall is allowed for this fs✨
• security_read_policy(9)read the policy.✨
• security_read_state_kernel(9)read the policy.✨
• security_release_secctx(9)Free a secctx buffer✨
• security_req_classify_flow(9)Set a flow's secid based on request_sock✨
• security_sb_alloc(9)Allocate a super_block LSM blob✨
• security_sb_clone_mnt_opts(9)Duplicate superblock mount options✨
• security_sb_delete(9)Release super_block LSM associated objects✨
• security_sb_eat_lsm_opts(9)Consume LSM mount options✨
• security_sb_free(9)Free a super_block LSM blob✨
• security_sb_kern_mount(9)Check if a kernel mount is allowed✨
• security_sb_mnt_opts_compat(9)Check if new mount options are allowed✨
• security_sb_mount(9)Check permission for mounting a filesystem✨
• security_sb_pivotroot(9)Check permissions for pivoting the rootfs✨
• security_sb_remount(9)Verify no incompatible mount changes during remount✨
• security_sb_set_mnt_opts(9)Set the mount options for a filesystem✨
• security_sb_show_options(9)Output the mount options for a superblock✨
• security_sb_statfs(9)Check if accessing fs stats is allowed✨
• security_sb_umount(9)Check permission for unmounting a filesystem✨
• security_sctp_assoc_established(9)Update LSM state when assoc established✨
• security_sctp_assoc_request(9)Update the LSM on a SCTP association req✨
• security_sctp_bind_connect(9)Validate a list of addrs for a SCTP option✨
• security_sctp_sk_clone(9)Clone a SCTP sock's LSM state✨
• security_secctx_to_secid(9)Convert a secctx to a secid✨
• security_secid_to_secctx(9)Convert a secid to a secctx✨
• security_secmark_refcount_dec(9)Decrement the secmark labeling rule count✨
• security_secmark_refcount_inc(9)Increment the secmark labeling rule count✨
• security_secmark_relabel_packet(9)Check if setting a secmark is allowed✨
• security_sem_alloc(9)Allocate a sysv semaphore LSM blob✨
• security_sem_associate(9)Check if a sysv semaphore operation is allowed✨
• security_sem_free(9)Free a sysv semaphore LSM blob✨
• security_sem_semctl(9)Check if a sysv semaphore operation is allowed✨
• security_sem_semop(9)Check if a sysv semaphore operation is allowed✨
• security_setprocattr(9)Set an attribute for a task✨
• security_setselfattr(9)Set an LSM attribute on the current process.✨
• security_settime64(9)Check if changing the system time is allowed✨
• security_shm_alloc(9)Allocate a sysv shm LSM blob✨
• security_shm_associate(9)Check if a sysv shm operation is allowed✨
• security_shm_free(9)Free a sysv shm LSM blob✨
• security_shm_shmat(9)Check if a sysv shm attach operation is allowed✨
• security_shm_shmctl(9)Check if a sysv shm operation is allowed✨
• security_sid_to_context(9)Obtain a context for a given SID.✨
• security_sid_to_context_inval(9)Obtain a context for a given SID if it is invalid.✨
• security_sk_alloc(9)Allocate and initialize a sock's LSM blob✨
• security_sk_classify_flow(9)Set a flow's secid based on socket✨
• security_sk_clone(9)Clone a sock's LSM state✨
• security_sk_free(9)Free the sock's LSM blob✨
• security_sock_graft(9)Reconcile LSM state when grafting a sock on a socket✨
• security_sock_rcv_skb(9)Check if an incoming network packet is allowed✨
• security_socket_accept(9)Check if a socket is allowed to accept connections✨
• security_socket_bind(9)Check if a socket bind operation is allowed✨
• security_socket_connect(9)Check if a socket connect operation is allowed✨
• security_socket_create(9)Check if creating a new socket is allowed✨
• security_socket_getpeername(9)Check if reading the peer's addr is allowed✨
• security_socket_getpeersec_dgram(9)Get the remote peer label✨
• security_socket_getpeersec_stream(9)Get the remote peer label✨
• security_socket_getsockname(9)Check if reading the socket addr is allowed✨
• security_socket_getsockopt(9)Check if reading a socket option is allowed✨
• security_socket_listen(9)Check if a socket is allowed to listen✨
• security_socket_post_create(9)Initialize a newly created socket✨
• security_socket_recvmsg(9)Check if receiving a message is allowed✨
• security_socket_sendmsg(9)Check if sending a message is allowed✨
• security_socket_setsockopt(9)Check if setting a socket option is allowed✨
• security_socket_shutdown(9)Checks if shutting down the socket is allowed✨
• security_socket_socketpair(9)Check if creating a socketpair is allowed✨
• security_syslog(9)Check if accessing the kernel message ring is allowed✨
• security_task_alloc(9)Allocate a task's LSM blob✨
• security_task_fix_setgid(9)Update LSM with new group id attributes✨
• security_task_fix_setgroups(9)Update LSM with new supplementary groups✨
• security_task_fix_setuid(9)Update LSM with new user id attributes✨
• security_task_free(9)Free a task's LSM blob and related resources✨
• security_task_getioprio(9)Check if getting a task's ioprio is allowed✨
• security_task_getlsmprop_obj(9)Get a task's objective LSM data✨
• security_task_getpgid(9)Check if getting the pgid is allowed✨
• security_task_getscheduler(9)Check if getting scheduling info is allowed✨
• security_task_getsid(9)Check if getting the session id is allowed✨
• security_task_kill(9)Check if sending a signal is allowed✨
• security_task_movememory(9)Check if moving memory is allowed✨
• security_task_prctl(9)Handle an LSM specific prctl() call✨
• security_task_prlimit(9)Check if get/setting resources limits is allowed✨
• security_task_setioprio(9)Check if setting a task's ioprio is allowed✨
• security_task_setnice(9)Check if setting a task's nice value is allowed✨
• security_task_setpgid(9)Check if setting the pgid is allowed✨
• security_task_setrlimit(9)Check if setting a new rlimit value is allowed✨
• security_task_setscheduler(9)Check if setting sched policy/param is allowed✨
• security_task_to_inode(9)Set the security attributes of a task's inode✨
• security_transfer_creds(9)Transfer creds✨
• security_transition_sid(9)Compute the SID for a new subject/object.✨