__audit_log_bprm_fcaps(9) [suse man page]

__AUDIT_LOG_BPRM_FCA(9) 					 Audit Interfaces					   __AUDIT_LOG_BPRM_FCA(9)

NAME

       __audit_log_bprm_fcaps - store information about a loading bprm and relevant fcaps

SYNOPSIS

       int __audit_log_bprm_fcaps(struct linux_binprm * bprm, const struct cred * new, const struct cred * old);

ARGUMENTS

       bprm
	   pointer to the bprm being processed

       new
	   the proposed new credentials

       old
	   the old credentials

DESCRIPTION

       Simply check if the proc already has the caps given by the file and if not store the priv escalation info for later auditing at the end of
       the syscall

       -Eric

COPYRIGHT

Kernel Hackers Manual 2.6.					     July 2010						   __AUDIT_LOG_BPRM_FCA(9)

VOP_ACCESS(9)						   BSD Kernel Developer's Manual					     VOP_ACCESS(9)

NAME

     VOP_ACCESS, VOP_ACCESSX -- check access permissions of a file or Unix domain socket

SYNOPSIS

     #include <sys/param.h>
     #include <sys/vnode.h>

     int
     VOP_ACCESS(struct vnode *vp, accmode_t accmode, struct ucred *cred, struct thread *td);

     int
     VOP_ACCESSX(struct vnode *vp, accmode_t accmode, struct ucred *cred, struct thread *td);

DESCRIPTION

     This entry point checks the access permissions of the file against the given credentials.

     Its arguments are:

     vp       The vnode of the file to check.

     accmode  The type of access required.

     cred     The user credentials to check.

     td       The thread which is checking.

     The accmode is a mask which can contain flags described in <sys/vnode.h>, e.g.  VREAD, VWRITE or VEXEC.  For VOP_ACCESS(), the only flags
     that may be set in accmode are VEXEC, VWRITE, VREAD, VADMIN and VAPPEND.  To check for other flags, one has to use VOP_ACCESSX() instead.

LOCKS

     The vnode will be locked on entry and should remain locked on return.

RETURN VALUES

     If the file is accessible in the specified way, then zero is returned, otherwise an appropriate error code is returned.

ERRORS

     [EPERM]		An attempt was made to change an immutable file.

     [EACCES]		The permission bits the file mode or the ACL do not permit the requested access.

SEE ALSO

     vaccess(9), vaccess_acl_nfs4(9), vaccess_acl_posix1e(9), vnode(9)

AUTHORS

     This manual page was written by Doug Rabson.

BSD
								September 18, 2009							       BSD