AVC_HAS_PERM_NOAUDIT

Section: (9)
Updated: 09 October 2005
Index Return to Main Contents

 

NAME

avc_has_perm_noaudit - Check permissions but perform no auditing.  

SYNOPSIS

"SYNOPSIS"

int avc_has_perm_noaudit (u32 ssid, u32 tsid, u16 tclass, u32 requested, struct av_decision * avd);  

ARGUMENTS

ssid
source security identifier
tsid
target security identifier
tclass
target security class
requested
requested permissions, interpreted based on tclass
avd
access vector decisions
 

DESCRIPTION

Check the AVC to determine whether the requested permissions are granted for the SID pair (ssid, tsid), interpreting the permissions based on tclass, and call the security server on a cache miss to obtain a new decision and add it to the cache. Return a copy of the decisions in avd. Return 0 if all requested permissions are granted, -EACCES if any permissions are denied, or another -errno upon other errors. This function is typically called by avc_has_perm, but may also be called directly to separate permission checking from auditing, e.g. in cases where a lock must be held for the check but should be released for the auditing.


 

Index

NAME
SYNOPSIS
ARGUMENTS
DESCRIPTION

This document was created by man2html, using the manual pages.
Time: 00:01:58 GMT, October 09, 2005