Lines Matching refs:sksec

4014 	struct sk_security_struct *sksec = sk->sk_security;  in sock_has_perm()  local
4019 if (sksec->sid == SECINITSID_KERNEL) in sock_has_perm()
4026 return avc_has_perm(tsid, sksec->sid, sksec->sclass, perms, &ad); in sock_has_perm()
4053 struct sk_security_struct *sksec; in selinux_socket_post_create() local
4069 sksec = sock->sk->sk_security; in selinux_socket_post_create()
4070 sksec->sid = isec->sid; in selinux_socket_post_create()
4071 sksec->sclass = isec->sclass; in selinux_socket_post_create()
4100 struct sk_security_struct *sksec = sk->sk_security; in selinux_socket_bind() local
4132 err = avc_has_perm(sksec->sid, sid, in selinux_socket_bind()
4133 sksec->sclass, in selinux_socket_bind()
4140 switch (sksec->sclass) { in selinux_socket_bind()
4172 err = avc_has_perm(sksec->sid, sid, in selinux_socket_bind()
4173 sksec->sclass, node_perm, &ad); in selinux_socket_bind()
4184 struct sk_security_struct *sksec = sk->sk_security; in selinux_socket_connect() local
4194 if (sksec->sclass == SECCLASS_TCP_SOCKET || in selinux_socket_connect()
4195 sksec->sclass == SECCLASS_DCCP_SOCKET) { in selinux_socket_connect()
4219 perm = (sksec->sclass == SECCLASS_TCP_SOCKET) ? in selinux_socket_connect()
4226 err = avc_has_perm(sksec->sid, sid, sksec->sclass, perm, &ad); in selinux_socket_connect()
4383 struct sk_security_struct *sksec = sk->sk_security; in selinux_sock_rcv_skb_compat() local
4384 u32 sk_sid = sksec->sid; in selinux_sock_rcv_skb_compat()
4404 err = selinux_netlbl_sock_rcv_skb(sksec, skb, family, &ad); in selinux_sock_rcv_skb_compat()
4407 err = selinux_xfrm_sock_rcv_skb(sksec->sid, skb, &ad); in selinux_sock_rcv_skb_compat()
4415 struct sk_security_struct *sksec = sk->sk_security; in selinux_socket_sock_rcv_skb() local
4417 u32 sk_sid = sksec->sid; in selinux_socket_sock_rcv_skb()
4487 struct sk_security_struct *sksec = sock->sk->sk_security; in selinux_socket_getpeersec_stream() local
4490 if (sksec->sclass == SECCLASS_UNIX_STREAM_SOCKET || in selinux_socket_getpeersec_stream()
4491 sksec->sclass == SECCLASS_TCP_SOCKET) in selinux_socket_getpeersec_stream()
4492 peer_sid = sksec->peer_sid; in selinux_socket_getpeersec_stream()
4543 struct sk_security_struct *sksec; in selinux_sk_alloc_security() local
4545 sksec = kzalloc(sizeof(*sksec), priority); in selinux_sk_alloc_security()
4546 if (!sksec) in selinux_sk_alloc_security()
4549 sksec->peer_sid = SECINITSID_UNLABELED; in selinux_sk_alloc_security()
4550 sksec->sid = SECINITSID_UNLABELED; in selinux_sk_alloc_security()
4551 selinux_netlbl_sk_security_reset(sksec); in selinux_sk_alloc_security()
4552 sk->sk_security = sksec; in selinux_sk_alloc_security()
4559 struct sk_security_struct *sksec = sk->sk_security; in selinux_sk_free_security() local
4562 selinux_netlbl_sk_security_free(sksec); in selinux_sk_free_security()
4563 kfree(sksec); in selinux_sk_free_security()
4568 struct sk_security_struct *sksec = sk->sk_security; in selinux_sk_clone_security() local
4571 newsksec->sid = sksec->sid; in selinux_sk_clone_security()
4572 newsksec->peer_sid = sksec->peer_sid; in selinux_sk_clone_security()
4573 newsksec->sclass = sksec->sclass; in selinux_sk_clone_security()
4583 struct sk_security_struct *sksec = sk->sk_security; in selinux_sk_getsecid() local
4585 *secid = sksec->sid; in selinux_sk_getsecid()
4592 struct sk_security_struct *sksec = sk->sk_security; in selinux_sock_graft() local
4596 isec->sid = sksec->sid; in selinux_sock_graft()
4597 sksec->sclass = isec->sclass; in selinux_sock_graft()
4603 struct sk_security_struct *sksec = sk->sk_security; in selinux_inet_conn_request() local
4612 err = selinux_conn_sid(sksec->sid, peersid, &connsid); in selinux_inet_conn_request()
4641 struct sk_security_struct *sksec = sk->sk_security; in selinux_inet_conn_established() local
4647 selinux_skb_peerlbl_sid(skb, family, &sksec->peer_sid); in selinux_inet_conn_established()
4721 struct sk_security_struct *sksec = sk->sk_security; in selinux_tun_dev_attach() local
4730 sksec->sid = tunsec->sid; in selinux_tun_dev_attach()
4731 sksec->sclass = SECCLASS_TUN_SOCKET; in selinux_tun_dev_attach()
4760 struct sk_security_struct *sksec = sk->sk_security; in selinux_nlmsg_perm() local
4768 err = selinux_nlmsg_lookup(sksec->sclass, nlh->nlmsg_type, &perm); in selinux_nlmsg_perm()
4774 sk->sk_protocol, nlh->nlmsg_type, sksec->sclass); in selinux_nlmsg_perm()
4879 struct sk_security_struct *sksec; in selinux_ip_output() local
4897 sksec = sk->sk_security; in selinux_ip_output()
4898 sid = sksec->sid; in selinux_ip_output()
4919 struct sk_security_struct *sksec; in selinux_ip_postroute_compat() local
4927 sksec = sk->sk_security; in selinux_ip_postroute_compat()
4937 if (avc_has_perm(sksec->sid, skb->secmark, in selinux_ip_postroute_compat()
4941 if (selinux_xfrm_postroute_last(sksec->sid, skb, &ad, proto)) in selinux_ip_postroute_compat()
5016 struct sk_security_struct *sksec = sk->sk_security; in selinux_ip_postroute() local
5039 if (selinux_conn_sid(sksec->sid, skb_sid, &peer_sid)) in selinux_ip_postroute()
5045 struct sk_security_struct *sksec = sk->sk_security; in selinux_ip_postroute() local
5046 peer_sid = sksec->sid; in selinux_ip_postroute()