Skip to content
Closed
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
8 changes: 4 additions & 4 deletions include/linux/lsm_hooks.h
Original file line number Diff line number Diff line change
Expand Up @@ -35,13 +35,13 @@
* Security hooks for program execution operations.
*
* @bprm_set_creds:
* Save security information in the bprm->security field, typically based
* Save security information in the bprm->cred->security field, typically based
* on information about the bprm->file, for later use by the apply_creds
* hook. This hook may also optionally check permissions (e.g. for
* transitions between security domains).
* This hook may be called multiple times during a single execve, e.g. for
* interpreters. The hook can tell whether it has already been called by
* checking to see if @bprm->security is non-NULL. If so, then the hook
* checking to see if @bprm->cred->security is non-NULL. If so, then the hook
* may decide either to retain the security information saved earlier or
* to replace it. The hook must set @bprm->secureexec to 1 if a "secure
* exec" has happened as a result of this hook call. The flag is used to
Expand All @@ -52,8 +52,8 @@
* Return 0 if the hook is successful and permission is granted.
* @bprm_check_security:
* This hook mediates the point when a search for a binary handler will
* begin. It allows a check the @bprm->security value which is set in the
* preceding set_creds call. The primary difference from set_creds is
* begin. It allows a check the @bprm->cred->security value which is set in
* the preceding set_creds call. The primary difference from set_creds is
* that the argv list and envp list are reliably available in @bprm. This
* hook may be called multiple times during a single execve; and in each
* pass set_creds is called first.
Expand Down