section 9 · Kernel routines 🧠

S (continued)

• security_inode_setattr(9)Check if setting file attributes is allowed✨
• security_inode_setintegrity(9)Set the inode's integrity data✨
• security_inode_setsecctx(9)Change the security label of an inode✨
• security_inode_setsecurity(9)Set the xattr security label of an inode✨
• security_inode_setxattr(9)Check if setting file xattrs is allowed✨
• security_inode_symlink(9)Check if creating a symbolic link is allowed✨
• security_inode_unlink(9)Check if removing a hard link is allowed✨
• security_ipc_getlsmprop(9)Get the sysv ipc object LSM data✨
• security_ipc_permission(9)Check if sysv ipc access is allowed✨
• security_ismaclabel(9)Check if the named attribute is a MAC label✨
• security_kernel_act_as(9)Set the kernel credentials to act as secid✨
• security_kernel_create_files_as(9)Set file creation context using an inode✨
• security_kernel_load_data(9)Load data provided by userspace✨
• security_kernel_module_request(9)Check if loading a module is allowed✨
• security_kernel_post_load_data(9)Load userspace data from a non-file source✨
• security_kernel_post_read_file(9)Read a file specified by userspace✨
• security_kernel_read_file(9)Read a file specified by userspace✨
• security_kernfs_init_security(9)Init LSM context for a kernfs node✨
• security_key_alloc(9)Allocate and initialize a kernel key LSM blob✨
• security_key_free(9)Free a kernel key LSM blob✨
• security_key_getsecurity(9)Get the key's security label✨
• security_key_permission(9)Check if a kernel key operation is allowed✨
• security_key_post_create_or_update(9)Notification of key create or update✨
• security_load_policy(9)Load a security policy configuration.✨
• security_locked_down(9)Check if a kernel feature is allowed✨
• security_lsmprop_to_secctx(9)Convert a lsm_prop to a secctx✨
• security_member_sid(9)Compute the SID for member selection.✨
• security_mmap_addr(9)Check if mmap'ing an address is allowed✨
• security_mmap_backing_file(9)Check if mmap'ing a backing file is allowed✨
• security_mmap_file(9)Check if mmap'ing a file is allowed✨
• security_move_mount(9)Check permissions for moving a mount✨
• security_mptcp_add_subflow(9)Inherit the LSM label from the MPTCP socket✨
• security_msg_msg_alloc(9)Allocate a sysv ipc message LSM blob✨
• security_msg_msg_free(9)Free a sysv ipc message LSM blob✨
• security_msg_queue_alloc(9)Allocate a sysv ipc msg queue LSM blob✨
• security_msg_queue_associate(9)Check if a msg queue operation is allowed✨
• security_msg_queue_free(9)Free a sysv ipc msg queue LSM blob✨
• security_msg_queue_msgctl(9)Check if a msg queue operation is allowed✨
• security_msg_queue_msgrcv(9)Check if receiving a sysv ipc msg is allowed✨
• security_msg_queue_msgsnd(9)Check if sending a sysv ipc message is allowed✨
• security_net_peersid_resolve(9)Compare and resolve two network peer SIDs✨
• security_netif_sid(9)Obtain the SID for a network interface.✨
• security_netlbl_cache_add(9)Add an entry to the NetLabel cache✨
• security_netlbl_secattr_to_sid(9)Convert a NetLabel secattr to a SELinux SID✨
• security_netlbl_sid_to_secattr(9)Convert a SELinux SID to a NetLabel secattr✨
• security_netlink_send(9)Save info and check if netlink sending is allowed✨
• security_node_sid(9)Obtain the SID for a node (host).✨
• security_path_chmod(9)Check if changing the file's mode is allowed✨
• security_path_chown(9)Check if changing the file's owner/group is allowed✨
• security_path_chroot(9)Check if changing the root directory is allowed✨
• security_path_link(9)Check if creating a hard link is allowed✨
• security_path_mkdir(9)Check if creating a new directory is allowed✨
• security_path_mknod(9)Check if creating a special file is allowed✨
• security_path_notify(9)Check if setting a watch is allowed✨
• security_path_post_mknod(9)Update inode security after reg file creation✨
• security_path_rename(9)Check if renaming a file is allowed✨
• security_path_rmdir(9)Check if removing a directory is allowed✨
• security_path_symlink(9)Check if creating a symbolic link is allowed✨
• security_path_truncate(9)Check if truncating a file is allowed✨
• security_path_unlink(9)Check if removing a hard link is allowed✨
• security_perf_event_alloc(9)Allocate a perf event LSM blob✨
• security_perf_event_free(9)Free a perf event LSM blob✨
• security_perf_event_open(9)Check if a perf event open is allowed✨
• security_perf_event_read(9)Check if reading a perf event label is allowed✨
• security_perf_event_write(9)Check if writing a perf event label is allowed✨
• security_policycap_supported(9)Check for a specific policy capability✨
• security_port_sid(9)Obtain the SID for a port.✨
• security_post_notification(9)Check if a watch notification can be posted✨
• security_prepare_creds(9)Prepare a new set of credentials✨
• security_ptrace_access_check(9)Check if tracing is allowed✨
• security_ptrace_traceme(9)Check if tracing is allowed✨
• security_quota_on(9)Check if QUOTAON is allowed for a dentry✨
• security_quotactl(9)Check if a quotactl() syscall is allowed for this fs✨
• security_read_policy(9)read the policy.✨
• security_read_state_kernel(9)read the policy.✨
• security_release_secctx(9)Free a secctx buffer✨
• security_req_classify_flow(9)Set a flow's secid based on request_sock✨
• security_sb_alloc(9)Allocate a super_block LSM blob✨
• security_sb_clone_mnt_opts(9)Duplicate superblock mount options✨
• security_sb_delete(9)Release super_block LSM associated objects✨
• security_sb_eat_lsm_opts(9)Consume LSM mount options✨
• security_sb_free(9)Free a super_block LSM blob✨
• security_sb_kern_mount(9)Check if a kernel mount is allowed✨
• security_sb_mnt_opts_compat(9)Check if new mount options are allowed✨
• security_sb_mount(9)Check permission for mounting a filesystem✨
• security_sb_pivotroot(9)Check permissions for pivoting the rootfs✨
• security_sb_remount(9)Verify no incompatible mount changes during remount✨
• security_sb_set_mnt_opts(9)Set the mount options for a filesystem✨
• security_sb_show_options(9)Output the mount options for a superblock✨
• security_sb_statfs(9)Check if accessing fs stats is allowed✨
• security_sb_umount(9)Check permission for unmounting a filesystem✨
• security_sctp_assoc_established(9)Update LSM state when assoc established✨
• security_sctp_assoc_request(9)Update the LSM on a SCTP association req✨
• security_sctp_bind_connect(9)Validate a list of addrs for a SCTP option✨
• security_sctp_sk_clone(9)Clone a SCTP sock's LSM state✨
• security_secctx_to_secid(9)Convert a secctx to a secid✨
• security_secid_to_secctx(9)Convert a secid to a secctx✨
• security_secmark_refcount_dec(9)Decrement the secmark labeling rule count✨
• security_secmark_refcount_inc(9)Increment the secmark labeling rule count✨
• security_secmark_relabel_packet(9)Check if setting a secmark is allowed✨
• security_sem_alloc(9)Allocate a sysv semaphore LSM blob✨
• security_sem_associate(9)Check if a sysv semaphore operation is allowed✨
• security_sem_free(9)Free a sysv semaphore LSM blob✨
• security_sem_semctl(9)Check if a sysv semaphore operation is allowed✨
• security_sem_semop(9)Check if a sysv semaphore operation is allowed✨
• security_setprocattr(9)Set an attribute for a task✨
• security_setselfattr(9)Set an LSM attribute on the current process.✨
• security_settime64(9)Check if changing the system time is allowed✨
• security_shm_alloc(9)Allocate a sysv shm LSM blob✨
• security_shm_associate(9)Check if a sysv shm operation is allowed✨
• security_shm_free(9)Free a sysv shm LSM blob✨
• security_shm_shmat(9)Check if a sysv shm attach operation is allowed✨
• security_shm_shmctl(9)Check if a sysv shm operation is allowed✨
• security_sid_to_context(9)Obtain a context for a given SID.✨
• security_sid_to_context_inval(9)Obtain a context for a given SID if it is invalid.✨
• security_sk_alloc(9)Allocate and initialize a sock's LSM blob✨
• security_sk_classify_flow(9)Set a flow's secid based on socket✨
• security_sk_clone(9)Clone a sock's LSM state✨
• security_sk_free(9)Free the sock's LSM blob✨
• security_sock_graft(9)Reconcile LSM state when grafting a sock on a socket✨
• security_sock_rcv_skb(9)Check if an incoming network packet is allowed✨
• security_socket_accept(9)Check if a socket is allowed to accept connections✨
• security_socket_bind(9)Check if a socket bind operation is allowed✨
• security_socket_connect(9)Check if a socket connect operation is allowed✨
• security_socket_create(9)Check if creating a new socket is allowed✨
• security_socket_getpeername(9)Check if reading the peer's addr is allowed✨
• security_socket_getpeersec_dgram(9)Get the remote peer label✨
• security_socket_getpeersec_stream(9)Get the remote peer label✨
• security_socket_getsockname(9)Check if reading the socket addr is allowed✨
• security_socket_getsockopt(9)Check if reading a socket option is allowed✨
• security_socket_listen(9)Check if a socket is allowed to listen✨
• security_socket_post_create(9)Initialize a newly created socket✨
• security_socket_recvmsg(9)Check if receiving a message is allowed✨
• security_socket_sendmsg(9)Check if sending a message is allowed✨
• security_socket_setsockopt(9)Check if setting a socket option is allowed✨
• security_socket_shutdown(9)Checks if shutting down the socket is allowed✨
• security_socket_socketpair(9)Check if creating a socketpair is allowed✨
• security_syslog(9)Check if accessing the kernel message ring is allowed✨
• security_task_alloc(9)Allocate a task's LSM blob✨
• security_task_fix_setgid(9)Update LSM with new group id attributes✨
• security_task_fix_setgroups(9)Update LSM with new supplementary groups✨
• security_task_fix_setuid(9)Update LSM with new user id attributes✨
• security_task_free(9)Free a task's LSM blob and related resources✨
• security_task_getioprio(9)Check if getting a task's ioprio is allowed✨
• security_task_getlsmprop_obj(9)Get a task's objective LSM data✨
• security_task_getpgid(9)Check if getting the pgid is allowed✨
• security_task_getscheduler(9)Check if getting scheduling info is allowed✨
• security_task_getsid(9)Check if getting the session id is allowed✨
• security_task_kill(9)Check if sending a signal is allowed✨
• security_task_movememory(9)Check if moving memory is allowed✨
• security_task_prctl(9)Handle an LSM specific prctl() call✨
• security_task_prlimit(9)Check if get/setting resources limits is allowed✨
• security_task_setioprio(9)Check if setting a task's ioprio is allowed✨
• security_task_setnice(9)Check if setting a task's nice value is allowed✨
• security_task_setpgid(9)Check if setting the pgid is allowed✨
• security_task_setrlimit(9)Check if setting a new rlimit value is allowed✨
• security_task_setscheduler(9)Check if setting sched policy/param is allowed✨
• security_task_to_inode(9)Set the security attributes of a task's inode✨
• security_transfer_creds(9)Transfer creds✨
• security_transition_sid(9)Compute the SID for a new subject/object.✨
• security_tun_dev_alloc_security(9)Allocate a LSM blob for a TUN device✨
• security_tun_dev_attach(9)Update TUN device LSM state on attach✨
• security_tun_dev_attach_queue(9)Check if attaching a TUN queue is allowed✨
• security_tun_dev_create(9)Check if creating a TUN device is allowed✨
• security_tun_dev_free_security(9)Free a TUN device LSM blob✨
• security_tun_dev_open(9)Update TUN device LSM state on open✨
• security_unix_find(9)Check if a named AF_UNIX socket can connect✨
• security_unix_may_send(9)Check if AF_UNIX socket can send datagrams✨
• security_unix_stream_connect(9)Check if a AF_UNIX stream is allowed✨
• security_uring_allowed(9)Check if io_uring_setup() is allowed✨
• security_uring_cmd(9)Check if a io_uring passthrough command is allowed✨
• security_uring_override_creds(9)Check if overriding creds is allowed✨
• security_uring_sqpoll(9)Check if IORING_SETUP_SQPOLL is allowed✨
• security_vm_enough_memory_mm(9)Check if allocating a new mem map is allowed✨
• security_watch_key(9)Check if a task is allowed to watch for key events✨
• security_xfrm_decode_session(9)Determine the xfrm secid for a packet✨
• security_xfrm_policy_alloc(9)Allocate a xfrm policy LSM blob✨
• security_xfrm_policy_clone(9)Clone xfrm policy LSM state✨
• security_xfrm_policy_delete(9)Check if deleting a xfrm policy is allowed✨
• security_xfrm_policy_free(9)Free a xfrm security context✨
• security_xfrm_policy_lookup(9)Check if using a xfrm policy is allowed✨
• security_xfrm_state_alloc(9)Allocate a xfrm state LSM blob✨
• security_xfrm_state_alloc_acquire(9)Allocate a xfrm state LSM blob✨
• security_xfrm_state_delete(9)Check if deleting a xfrm state is allowed✨
• security_xfrm_state_free(9)Free a xfrm state✨
• security_xfrm_state_pol_flow_match(9)Check for a xfrm match✨
• securityfs_create_dentry(9)create a dentry in the securityfs filesystem✨
• securityfs_create_dir(9)create a directory in the securityfs filesystem✨
• securityfs_create_file(9)create a file in the securityfs filesystem✨
• securityfs_create_symlink(9)create a symlink in the securityfs filesystem✨
• securityfs_remove(9)removes a file or directory from the securityfs filesystem✨
• segv_handler(9)the SIGSEGV handler✨
• sel_ib_pkey_find(9)Search for a pkey record✨
• sel_ib_pkey_flush(9)Flush the entire pkey table✨
• sel_ib_pkey_hashfn(9)Hashing function for the pkey table✨
• sel_ib_pkey_insert(9)Insert a new pkey into the table✨
• sel_ib_pkey_sid(9)Lookup the SID of a PKEY✨
• sel_ib_pkey_sid_slow(9)Lookup the SID of a pkey using the policy✨
• sel_loadlut(9)load the LUT table✨
• sel_netif_destroy(9)Remove an interface record from the table✨