AVC_HAS_PERM_NOAUDIT

Section: ()
Updated: 06 October 2005
Index Return to Main Contents

 

NAME

avc_has_perm_noaudit - Check permissions but perform no auditing.  

SYNOPSIS

"SYNOPSIS"

int avc_has_perm_noaudit (u32 ssid, u32 tsid, u16 tclass, u32 requested, struct avc_entry_ref * aeref, struct av_decision * avd);  

ARGUMENTS

ssid
source security identifier
tsid
target security identifier
tclass
target security class
requested
requested permissions, interpreted based on tclass
aeref
AVC entry reference
avd
access vector decisions
 

DESCRIPTION

Check the AVC to determine whether the requested permissions are granted for the SID pair (ssid, tsid), interpreting the permissions based on tclass, and call the security server on a cache miss to obtain a new decision and add it to the cache. Update aeref to refer to an AVC entry with the resulting decisions, and return a copy of the decisions in avd. Return 0 if all requested permissions are granted, -EACCES if any permissions are denied, or another -errno upon other errors. This function is typically called by avc_has_perm, but may also be called directly to separate permission checking from auditing, e.g. in cases where a lock must be held for the check but should be released for the auditing.


 

Index

NAME
SYNOPSIS
ARGUMENTS
DESCRIPTION

This document was created by man2html, using the manual pages.
Time: 05:30:24 GMT, October 06, 2005