| /linux-6.15/security/safesetid/ |
| H A D | lsm.c | 47 } else if (policy->type == GID) { in _setid_policy_lookup() 75 else if (new_type == GID) in setid_policy_lookup() 157 } else if (new_type == GID){ in id_permitted_for_cred() 176 } else if (new_type == GID) { in id_permitted_for_cred() 221 if (setid_policy_lookup((kid_t){.gid = old->gid}, INVALID_ID, GID) == SIDPOL_DEFAULT) in safesetid_task_fix_setgid() 224 if (id_permitted_for_cred(old, (kid_t){.gid = new->gid}, GID) && in safesetid_task_fix_setgid() 225 id_permitted_for_cred(old, (kid_t){.gid = new->egid}, GID) && in safesetid_task_fix_setgid() 226 id_permitted_for_cred(old, (kid_t){.gid = new->sgid}, GID) && in safesetid_task_fix_setgid() 227 id_permitted_for_cred(old, (kid_t){.gid = new->fsgid}, GID)) in safesetid_task_fix_setgid() 244 if (setid_policy_lookup((kid_t){.gid = old->gid}, INVALID_ID, GID) == SIDPOL_DEFAULT) in safesetid_task_fix_setgroups() [all …]
|
| H A D | securityfs.c | 58 } else if (rule->type == GID){ in parse_policy_line() 92 else if (pol->type == GID) in insert_rule() 110 } else if (pol->type == GID) { in verify_ruleset() 131 nrule->type = GID; in verify_ruleset() 219 } else if (policy_type == GID) { in handle_policy_update() 263 return handle_policy_update(file, buf, len, GID); in safesetid_gid_file_write()
|
| H A D | Kconfig | 9 restrict UID/GID transitions from a given UID/GID to only those
|
| H A D | lsm.h | 37 GID enumerator
|
| /linux-6.15/Documentation/translations/zh_CN/security/ |
| H A D | credentials.rst | 48 这是由标记在索引节点上的UID和GID定义的。 69 与通常构成任务的对象上下文的真实UID和GID是相互独立的。 120 UID和GID由大多数(如果不是全部)Linux对象携带,即使有时它们需要被虚构出 129 而真实UID/GID 被用作对象上下文。对于任务,这并不总是正确的。 198 * UNIX UID, GID, mode; 271 gid_t current_gid(void) Current's real GID 273 gid_t current_egid(void) Current's effective GID 275 gid_t current_fsgid(void) Current's file access GID
|
| H A D | IMA-templates.rst | 21 的IMA这是有必要的。例如,可能报告的信息包括索引节点的 UID/GID或索引节点 70 - 'igid':索引节点的GID;
|
| /linux-6.15/Documentation/admin-guide/LSM/ |
| H A D | SafeSetID.rst | 5 UID/GID transitions from a given UID/GID to only those approved by a 8 allowing a user to set up user namespace UID/GID mappings. 57 to do process spawning and UID/GID transitions). Unfortunately, there are a 70 programs in the tree could change to any desired UID/GID in the context of their 103 mounted. The format for adding a policy is '<UID>:<UID>' or '<GID>:<GID>', 106 for a UID/GID will prevent that UID/GID from obtaining auxiliary setid 107 privileges, such as allowing a user to set up user namespace UID/GID mappings. 109 Note on GID policies and setgroups() 115 support in a future release for restricting setgroups() calls, these GID 117 once we have the policy checking code in place, which will rely on GID policy
|
| /linux-6.15/Documentation/ABI/stable/ |
| H A D | sysfs-driver-ib_srp | 18 destination GID. 118 Description: InfiniBand destination GID used for communication with the SRP 153 Description: InfiniBand destination GID specified in the parameters 182 Description: InfiniBand GID of the source port used for communication with
|
| H A D | sysfs-class-infiniband | 223 Description: The net-device's name associated with the GID resides 230 Description: The RoCE type of the associated GID resides at index <gid-index>. 345 entry in the port's P_Key or GID table respectively. For 361 <m>/gid_idx/0: (RO) Display the GID mapping m = 1..2
|
| /linux-6.15/Documentation/admin-guide/nfs/ |
| H A D | nfs-idmapper.rst | 42 gid: Find the GID for the given group 44 group: Find the group name for the given GID
|
| /linux-6.15/drivers/net/ethernet/renesas/ |
| H A D | ravb_ptp.c | 198 ravb_write(ndev, GID_PTCD, GID); in ravb_ptp_extts() 264 ravb_write(ndev, GID_PTMD0, GID); in ravb_ptp_perout()
|
| H A D | rtsn.h | 93 GID = TSNMHD + 0x0018, enumerator
|
| H A D | ravb.h | 175 GID = 0x03D0, /* R-Car Gen3 only */ enumerator
|
| /linux-6.15/Documentation/security/ |
| H A D | credentials.rst | 45 defined by the UID and the GID marked on the inode. 72 from the real UID and GID that normally form the objective context of the 132 The UID and GID are carried by most, if not all, Linux objects, even if in 142 EUID/EGID/GROUPS will be used as the subjective context, and real UID/GID 234 * UNIX UID, GID, mode; 320 gid_t current_gid(void) Current's real GID 322 gid_t current_egid(void) Current's effective GID 324 gid_t current_fsgid(void) Current's file access GID
|
| H A D | IMA-templates.rst | 15 the inode UID/GID or the LSM labels either of the inode and of the process 80 - 'igid': the inode GID;
|
| /linux-6.15/Documentation/admin-guide/perf/ |
| H A D | cxl.rst | 64 $# perf stat -a -e cxl_pmu_mem0.0/vid=VID,gid=GID,mask=MASK/
|
| /linux-6.15/Documentation/filesystems/ext4/ |
| H A D | inodes.rst | 79 - Lower 16-bits of GID. 206 - S_ISGID (Set GID) 395 - Upper 16-bits of the GID. 430 - Upper 16-bits of the GID.
|
| /linux-6.15/Documentation/filesystems/ |
| H A D | quota.rst | 48 - UID/GID (depends on quota type) of user / group whose limit
|
| H A D | hpfs.rst | 84 attributes with keys "UID", "GID" or "MODE" and 2-byte values are created. Only 95 that if somebody (I don't know who?) has set "UID", "GID", "MODE" or "DEV"
|
| /linux-6.15/drivers/infiniband/ |
| H A D | Kconfig | 74 This allows the user to config the default GID type that the CM
|
| /linux-6.15/Documentation/security/keys/ |
| H A D | request-key.rst | 108 UID, GID, groups and security info of process A as if it was process A, 129 of them, and (b) it requires the same UID/GID/Groups all the way through.
|
| /linux-6.15/Documentation/filesystems/nfs/ |
| H A D | rpc-cache.rst | 25 - mappings between local UID/GID and remote UID/GID for sites that
|
| /linux-6.15/security/keys/ |
| H A D | Kconfig | 19 to five standard keyrings: UID-specific, GID-specific, session,
|
| /linux-6.15/Documentation/ABI/testing/ |
| H A D | sysfs-class-rnbd-client | 43 gid:<GID>
|
| /linux-6.15/Documentation/admin-guide/sysctl/ |
| H A D | fs.rst | 147 with writes enabled, any UID or GID that would exceed 65535 is translated 150 These sysctls allow you to change the value of the fixed UID and GID.
|