| /Linux-v6.1/net/netfilter/ |
| D | xt_CONNSECMARK.c | 34 if (skb->secmark) { in secmark_save()
39 if (ct && !ct->secmark) { in secmark_save()
40 ct->secmark = skb->secmark; in secmark_save()
52 if (!skb->secmark) { in secmark_restore()
57 if (ct && ct->secmark) in secmark_restore()
58 skb->secmark = ct->secmark; in secmark_restore()
|
| D | xt_SECMARK.c | 29 u32 secmark = 0; in secmark_tg() local
33 secmark = info->secid; in secmark_tg()
39 skb->secmark = secmark; in secmark_tg()
|
| D | nft_meta.c | 362 *dest = skb->secmark; in nft_meta_get_eval()
450 skb->secmark = value; in nft_meta_set_eval()
878 skb->secmark = priv->secid; in nft_secmark_obj_eval()
|
| D | nft_ct.c | 106 *dest = ct->secmark; in nft_ct_get_eval()
308 if (ct->secmark != value) { in nft_ct_set_eval()
309 ct->secmark = value; in nft_ct_set_eval()
|
| D | nfnetlink_queue.c | 313 if (skb->secmark) in nfqnl_get_sk_secctx()
314 security_secid_to_secctx(skb->secmark, secdata, &seclen); in nfqnl_get_sk_secctx()
|
| D | nf_conntrack_netlink.c | 356 ret = security_secid_to_secctx(ct->secmark, &secctx, &len); in ctnetlink_dump_secctx()
665 ret = security_secid_to_secctx(ct->secmark, NULL, &len); in ctnetlink_secctx_size()
812 if ((events & (1 << IPCT_SECMARK) || ct->secmark) in ctnetlink_conntrack_event()
2724 if (ct->secmark && ctnetlink_dump_secctx(skb, ct) < 0) in __ctnetlink_glue_build()
|
| D | nf_conntrack_standalone.c | 182 ret = security_secid_to_secctx(ct->secmark, &secctx, &len); in ct_show_secctx()
|
| D | nf_conntrack_core.c | 1787 ct->secmark = exp->master->secmark; in init_conntrack()
|
| /Linux-v6.1/security/apparmor/ |
| D | net.c | 193 static int apparmor_secmark_init(struct aa_secmark *secmark) in apparmor_secmark_init() argument
197 if (secmark->label[0] == '*') { in apparmor_secmark_init()
198 secmark->secid = AA_SECID_WILDCARD; in apparmor_secmark_init()
203 secmark->label, strlen(secmark->label), in apparmor_secmark_init()
209 secmark->secid = label->secid; in apparmor_secmark_init()
224 if (!profile->secmark[i].secid) { in aa_secmark_perm()
225 ret = apparmor_secmark_init(&profile->secmark[i]); in aa_secmark_perm()
230 if (profile->secmark[i].secid == secid || in aa_secmark_perm()
231 profile->secmark[i].secid == AA_SECID_WILDCARD) { in aa_secmark_perm()
232 if (profile->secmark[i].deny) in aa_secmark_perm()
[all …]
|
| D | policy_unpack.c | 586 profile->secmark = kcalloc(size, sizeof(struct aa_secmark), in unpack_secmark()
588 if (!profile->secmark) in unpack_secmark()
594 if (!unpack_u8(e, &profile->secmark[i].audit, NULL)) in unpack_secmark()
596 if (!unpack_u8(e, &profile->secmark[i].deny, NULL)) in unpack_secmark()
598 if (!unpack_strdup(e, &profile->secmark[i].label, NULL)) in unpack_secmark()
610 if (profile->secmark) { in unpack_secmark()
612 kfree(profile->secmark[i].label); in unpack_secmark()
613 kfree(profile->secmark); in unpack_secmark()
615 profile->secmark = NULL; in unpack_secmark()
|
| D | lsm.c | 1081 if (!skb->secmark) in apparmor_socket_sock_rcv_skb()
1085 skb->secmark, sk); in apparmor_socket_sock_rcv_skb()
1188 if (!skb->secmark) in apparmor_inet_conn_request()
1192 skb->secmark, sk); in apparmor_inet_conn_request()
1798 if (!skb->secmark) in apparmor_ip_postroute()
1807 skb->secmark, sk)) in apparmor_ip_postroute()
|
| D | policy.c | 230 kfree_sensitive(profile->secmark[i].label); in aa_free_profile()
231 kfree_sensitive(profile->secmark); in aa_free_profile()
|
| /Linux-v6.1/security/smack/ |
| D | smack_netfilter.c | 32 skb->secmark = skp->smk_secid; in smack_ip_output()
|
| D | smack_lsm.c | 3858 if (skb == NULL || skb->secmark == 0) in smack_from_skb()
3861 return smack_from_secid(skb->secmark); in smack_from_skb()
|
| /Linux-v6.1/security/apparmor/include/ |
| D | policy.h | 159 struct aa_secmark *secmark; member
|
| /Linux-v6.1/include/net/netfilter/ |
| D | nf_conntrack.h | 118 u_int32_t secmark; member
|
| /Linux-v6.1/include/linux/ |
| D | skbuff.h | 1012 __u32 secmark;
4725 to->secmark = from->secmark; in skb_copy_secmark()
4730 skb->secmark = 0; in skb_init_secmark()
|
| /Linux-v6.1/security/selinux/ |
| D | hooks.c | 5037 sk_sid, skb->secmark, SECCLASS_PACKET, in selinux_sock_rcv_skb_compat()
5113 sk_sid, skb->secmark, SECCLASS_PACKET, in selinux_socket_sock_rcv_skb()
5668 peer_sid, skb->secmark, in selinux_ip_forward()
5749 sksec->sid, skb->secmark, in selinux_ip_postroute_compat()
5875 peer_sid, skb->secmark, in selinux_ip_postroute()
|
| /Linux-v6.1/net/core/ |
| D | skbuff.c | 1153 CHECK_SKB_FIELD(secmark); in __copy_skb_header()
|
