Lines Matching refs:sksec
4528 struct sk_security_struct *sksec = sk->sk_security; in sock_has_perm() local
4532 if (sksec->sid == SECINITSID_KERNEL) in sock_has_perm()
4540 current_sid(), sksec->sid, sksec->sclass, perms, in sock_has_perm()
4569 struct sk_security_struct *sksec; in selinux_socket_post_create() local
4585 sksec = sock->sk->sk_security; in selinux_socket_post_create()
4586 sksec->sclass = sclass; in selinux_socket_post_create()
4587 sksec->sid = sid; in selinux_socket_post_create()
4589 if (sksec->sclass == SECCLASS_SCTP_SOCKET) in selinux_socket_post_create()
4590 sksec->sctp_assoc_state = SCTP_ASSOC_UNSET; in selinux_socket_post_create()
4617 struct sk_security_struct *sksec = sk->sk_security; in selinux_socket_bind() local
4688 sksec->sid, sid, in selinux_socket_bind()
4689 sksec->sclass, in selinux_socket_bind()
4696 switch (sksec->sclass) { in selinux_socket_bind()
4728 sksec->sid, sid, in selinux_socket_bind()
4729 sksec->sclass, node_perm, &ad); in selinux_socket_bind()
4737 if (sksec->sclass == SECCLASS_SCTP_SOCKET) in selinux_socket_bind()
4749 struct sk_security_struct *sksec = sk->sk_security; in selinux_socket_connect_helper() local
4760 if (sksec->sclass == SECCLASS_TCP_SOCKET || in selinux_socket_connect_helper()
4761 sksec->sclass == SECCLASS_DCCP_SOCKET || in selinux_socket_connect_helper()
4762 sksec->sclass == SECCLASS_SCTP_SOCKET) { in selinux_socket_connect_helper()
4792 if (sksec->sclass == SECCLASS_SCTP_SOCKET) in selinux_socket_connect_helper()
4802 switch (sksec->sclass) { in selinux_socket_connect_helper()
4819 sksec->sid, sid, sksec->sclass, perm, &ad); in selinux_socket_connect_helper()
4997 struct sk_security_struct *sksec = sk->sk_security; in selinux_sock_rcv_skb_compat() local
4998 u32 sk_sid = sksec->sid; in selinux_sock_rcv_skb_compat()
5019 err = selinux_netlbl_sock_rcv_skb(sksec, skb, family, &ad); in selinux_sock_rcv_skb_compat()
5022 err = selinux_xfrm_sock_rcv_skb(sksec->sid, skb, &ad); in selinux_sock_rcv_skb_compat()
5030 struct sk_security_struct *sksec = sk->sk_security; in selinux_socket_sock_rcv_skb() local
5032 u32 sk_sid = sksec->sid; in selinux_socket_sock_rcv_skb()
5104 struct sk_security_struct *sksec = sock->sk->sk_security; in selinux_socket_getpeersec_stream() local
5107 if (sksec->sclass == SECCLASS_UNIX_STREAM_SOCKET || in selinux_socket_getpeersec_stream()
5108 sksec->sclass == SECCLASS_TCP_SOCKET || in selinux_socket_getpeersec_stream()
5109 sksec->sclass == SECCLASS_SCTP_SOCKET) in selinux_socket_getpeersec_stream()
5110 peer_sid = sksec->peer_sid; in selinux_socket_getpeersec_stream()
5164 struct sk_security_struct *sksec; in selinux_sk_alloc_security() local
5166 sksec = kzalloc(sizeof(*sksec), priority); in selinux_sk_alloc_security()
5167 if (!sksec) in selinux_sk_alloc_security()
5170 sksec->peer_sid = SECINITSID_UNLABELED; in selinux_sk_alloc_security()
5171 sksec->sid = SECINITSID_UNLABELED; in selinux_sk_alloc_security()
5172 sksec->sclass = SECCLASS_SOCKET; in selinux_sk_alloc_security()
5173 selinux_netlbl_sk_security_reset(sksec); in selinux_sk_alloc_security()
5174 sk->sk_security = sksec; in selinux_sk_alloc_security()
5181 struct sk_security_struct *sksec = sk->sk_security; in selinux_sk_free_security() local
5184 selinux_netlbl_sk_security_free(sksec); in selinux_sk_free_security()
5185 kfree(sksec); in selinux_sk_free_security()
5190 struct sk_security_struct *sksec = sk->sk_security; in selinux_sk_clone_security() local
5193 newsksec->sid = sksec->sid; in selinux_sk_clone_security()
5194 newsksec->peer_sid = sksec->peer_sid; in selinux_sk_clone_security()
5195 newsksec->sclass = sksec->sclass; in selinux_sk_clone_security()
5205 struct sk_security_struct *sksec = sk->sk_security; in selinux_sk_getsecid() local
5207 *secid = sksec->sid; in selinux_sk_getsecid()
5215 struct sk_security_struct *sksec = sk->sk_security; in selinux_sock_graft() local
5219 isec->sid = sksec->sid; in selinux_sock_graft()
5220 sksec->sclass = isec->sclass; in selinux_sock_graft()
5230 struct sk_security_struct *sksec = ep->base.sk->sk_security; in selinux_sctp_assoc_request() local
5256 if (sksec->sctp_assoc_state == SCTP_ASSOC_UNSET) { in selinux_sctp_assoc_request()
5257 sksec->sctp_assoc_state = SCTP_ASSOC_SET; in selinux_sctp_assoc_request()
5264 sksec->peer_sid = peer_sid; in selinux_sctp_assoc_request()
5265 } else if (sksec->peer_sid != peer_sid) { in selinux_sctp_assoc_request()
5273 sksec->peer_sid, peer_sid, sksec->sclass, in selinux_sctp_assoc_request()
5285 err = selinux_conn_sid(sksec->sid, peer_sid, &conn_sid); in selinux_sctp_assoc_request()
5375 struct sk_security_struct *sksec = sk->sk_security; in selinux_sctp_sk_clone() local
5386 newsksec->sclass = sksec->sclass; in selinux_sctp_sk_clone()
5393 struct sk_security_struct *sksec = sk->sk_security; in selinux_inet_conn_request() local
5402 err = selinux_conn_sid(sksec->sid, peersid, &connsid); in selinux_inet_conn_request()
5431 struct sk_security_struct *sksec = sk->sk_security; in selinux_inet_conn_established() local
5437 selinux_skb_peerlbl_sid(skb, family, &sksec->peer_sid); in selinux_inet_conn_established()
5515 struct sk_security_struct *sksec = sk->sk_security; in selinux_tun_dev_attach() local
5524 sksec->sid = tunsec->sid; in selinux_tun_dev_attach()
5525 sksec->sclass = SECCLASS_TUN_SOCKET; in selinux_tun_dev_attach()
5556 struct sk_security_struct *sksec = sk->sk_security; in selinux_nlmsg_perm() local
5564 err = selinux_nlmsg_lookup(sksec->sclass, nlh->nlmsg_type, &perm); in selinux_nlmsg_perm()
5571 secclass_map[sksec->sclass - 1].name, in selinux_nlmsg_perm()
5679 struct sk_security_struct *sksec; in selinux_ip_output() local
5697 sksec = sk->sk_security; in selinux_ip_output()
5698 sid = sksec->sid; in selinux_ip_output()
5728 struct sk_security_struct *sksec; in selinux_ip_postroute_compat() local
5736 sksec = sk->sk_security; in selinux_ip_postroute_compat()
5747 sksec->sid, skb->secmark, in selinux_ip_postroute_compat()
5751 if (selinux_xfrm_postroute_last(sksec->sid, skb, &ad, proto)) in selinux_ip_postroute_compat()
5826 struct sk_security_struct *sksec; in selinux_ip_postroute() local
5828 sksec = sk->sk_security; in selinux_ip_postroute()
5851 if (selinux_conn_sid(sksec->sid, skb_sid, &peer_sid)) in selinux_ip_postroute()
5857 struct sk_security_struct *sksec = sk->sk_security; in selinux_ip_postroute() local
5858 peer_sid = sksec->sid; in selinux_ip_postroute()