security/apparmor/task.c

24  * aa_get_task_label - Get another task's label
27  * Returns: counted reference to @task's label
41  * aa_replace_current_label - replace the current tasks label
42  * @label: new label  (NOT NULL)
46 int aa_replace_current_label(struct aa_label *label)
52 	AA_BUG(!label);
54 	if (old == label)
70 	if (unconfined(label) || (labels_ns(old) != labels_ns(label)))
72 		 * if switching to unconfined or a different label namespace
78 	 * be careful switching cred label, when racing replacement it
79 	 * is possible that the cred labels's->proxy->label is the reference
80 	 * keeping @label valid, so make sure to get its reference before
81 	 * dropping the reference on the cred's label
83 	aa_get_label(label);
85 	set_cred_label(new, label);
94  * @label: system label to set at exec  (MAYBE NULL to clear value)
97 void aa_set_current_onexec(struct aa_label *label, bool stack)
101 	aa_get_label(label);
103 	ctx->onexec = label;
109  * @label: label to set as the current hat  (NOT NULL)
117 int aa_set_current_hat(struct aa_label *label, u64 token)
125 	AA_BUG(!label);
139 	set_cred_label(new, aa_get_newest_label(label));
149  * aa_restore_previous_label - exit from hat context restoring previous label
152  * Attempt to return out of a hat to the previous label.  The token
164 	/* ignore restores when there is no saved label */
267 	if (&tracer->label == tracee)
270 	ad->subj_label = &tracer->label;
273 	ad->error = aa_capable(cred, &tracer->label, CAP_SYS_PTRACE,
282  * @tracer: label of the task doing the tracing  (NOT NULL)
284  * @tracee: task label to be traced
323 	ad->subj_label = &profile->label;