DepSurf

LSM

Name	4.4	4.8	4.10	4.13	4.15	4.18	5.0	5.3	5.4	5.8	5.11	5.13	5.15	5.19	6.2	6.5	6.8	arm64	armhf	ppc64el	riscv64	aws	azure	gcp	lowlatency
audit_rule_free										Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ
audit_rule_init														Δ	Δ	Δ	Δ
audit_rule_known
audit_rule_match								Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ
binder_set_context_mgr													Δ	Δ	Δ	Δ	Δ
binder_transaction													Δ	Δ	Δ	Δ	Δ
binder_transfer_binder													Δ	Δ	Δ	Δ	Δ
binder_transfer_file													Δ	Δ	Δ	Δ	Δ
bpf	∅	∅	∅	∅
bpf_map	∅	∅	∅	∅
bpf_prog	∅	∅	∅	∅
bprm_committed_creds																	Δ
bprm_committing_creds																	Δ
bprm_creds_for_exec	∅	∅	∅	∅	∅	∅	∅	∅	∅									∅	∅	∅	∅	∅	∅	∅	∅
bprm_creds_from_file	∅	∅	∅	∅	∅	∅	∅	∅	∅								Δ	∅	∅	∅	∅	∅	∅	∅	∅
bprm_secureexec					∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅
bprm_set_creds										∅	∅	∅	∅	∅	∅	∅	∅
capable							Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ
capget																	Δ
capset
cred_alloc_blank
cred_free
cred_getlsmblob	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅		∅	∅	∅	∅	∅	∅	∅	∅
cred_getsecid	∅	∅	∅	∅	∅					Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ
current_getlsmblob_subj	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅		∅	∅	∅	∅	∅	∅	∅	∅
current_getsecid_subj	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅				∅	∅	∅	∅	∅	∅	∅	∅	∅
dentry_create_files_as	∅	∅
dentry_init_security		Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ
d_instantiate
file_fcntl
file_ioctl
file_ioctl_compat	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅		∅	∅	∅	∅	∅	∅	∅	∅
file_lock
file_mprotect
file_open							Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ
file_permission
file_receive
file_send_sigiotask
file_set_fowner
file_truncate	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅				∅	∅	∅	∅	∅	∅	∅	∅
fs_context_dup	∅	∅	∅	∅	∅	∅	∅
fs_context_parse_param	∅	∅	∅	∅	∅	∅	∅
fs_context_submount	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅			∅	∅	∅	∅	∅	∅	∅	∅
getprocattr				Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ
getselfattr	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅		∅	∅	∅	∅	∅	∅	∅	∅
ib_alloc_security	∅	∅	∅
ib_endport_manage_subnet	∅	∅	∅
ib_free_security	∅	∅	∅
ib_pkey_access	∅	∅	∅
inet_conn_established
inet_conn_request											Δ	Δ	Δ	Δ	Δ	Δ	Δ
inet_csk_clone
inode_copy_up	∅	∅
inode_copy_up_xattr	∅	∅
inode_create
inode_follow_link
inode_get_acl	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅		Δ	Δ	∅	∅	∅	∅	∅	∅	∅	∅
inode_getattr
inode_getlsmblob	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅		∅	∅	∅	∅	∅	∅	∅	∅
inode_getsecctx										Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ
inode_getsecid		Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	∅
inode_getsecurity		Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ
inode_getxattr
inode_init_security
inode_init_security_anon	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅							∅	∅	∅	∅	∅	∅	∅	∅
inode_invalidate_secctx	∅
inode_killpriv												Δ	Δ	Δ	Δ	Δ	Δ
inode_link
inode_listsecurity
inode_listxattr
inode_mkdir
inode_mknod
inode_need_killpriv
inode_notifysecctx
inode_permission
inode_post_setxattr
inode_readlink
inode_remove_acl	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅		Δ	Δ	∅	∅	∅	∅	∅	∅	∅	∅
inode_removexattr												Δ	Δ	Δ	Δ	Δ	Δ
inode_rename
inode_rmdir
inode_set_acl	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅		Δ	Δ	∅	∅	∅	∅	∅	∅	∅	∅
inode_setattr															Δ	Δ	Δ
inode_setsecctx
inode_setsecurity
inode_setxattr												Δ	Δ	Δ	Δ	Δ	Δ
inode_symlink
inode_unlink
ipc_getlsmblob	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅		∅	∅	∅	∅	∅	∅	∅	∅
ipc_getsecid										Δ	Δ	Δ	Δ	Δ	Δ	Δ	∅
ipc_permission
ismaclabel
kernel_act_as										Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ
kernel_create_files_as
kernel_fw_from_file		∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅
kernel_load_data	∅	∅	∅	∅	∅	∅					Δ	Δ	Δ	Δ	Δ	Δ	Δ
kernel_module_from_file		∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅
kernel_module_request
kernel_post_load_data	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅								∅	∅	∅	∅	∅	∅	∅	∅
kernel_post_read_file	∅
kernel_read_file	∅										Δ	Δ	Δ	Δ	Δ	Δ	Δ
kernfs_init_security	∅	∅	∅	∅	∅	∅	∅
key_alloc
key_free
key_getsecurity																Δ	Δ
key_permission										Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ
locked_down	∅	∅	∅	∅	∅	∅	∅	∅
lock_kernel_down	∅	∅	∅	∅	∅	∅	∅	∅
lsmblob_to_secctx	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅		∅	∅	∅	∅	∅	∅	∅	∅
mmap_addr
mmap_file
move_mount	∅	∅	∅	∅	∅	∅	∅
mptcp_add_subflow	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅			∅	∅	∅	∅	∅	∅	∅	∅
msg_queue_associate						Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ
msg_queue_msgctl						Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ
msg_queue_msgrcv						Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ
msg_queue_msgsnd						Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ
netlink_send
path_chmod		Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ
path_chown		Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ
path_chroot		Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ
path_link		Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ
path_mkdir		Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ
path_mknod		Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ
path_notify	∅	∅	∅	∅	∅	∅	∅	∅
path_rename		Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ
path_rmdir		Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ
path_symlink		Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ
path_truncate		Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ
path_unlink		Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ
perf_event_alloc	∅	∅	∅	∅	∅	∅	∅	∅	∅									∅	∅	∅	∅	∅	∅	∅	∅
perf_event_free	∅	∅	∅	∅	∅	∅	∅	∅	∅									∅	∅	∅	∅	∅	∅	∅	∅
perf_event_open	∅	∅	∅	∅	∅	∅	∅	∅	∅									∅	∅	∅	∅	∅	∅	∅	∅
perf_event_read	∅	∅	∅	∅	∅	∅	∅	∅	∅									∅	∅	∅	∅	∅	∅	∅	∅
perf_event_write	∅	∅	∅	∅	∅	∅	∅	∅	∅									∅	∅	∅	∅	∅	∅	∅	∅
post_notification	∅	∅	∅	∅	∅	∅	∅	∅	∅									∅	∅	∅	∅	∅	∅	∅	∅
ptrace_access_check
ptrace_traceme
quotactl																	Δ
quota_on
release_secctx										Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ
req_classify_flow											Δ	Δ	Δ	Δ	Δ	Δ	Δ
sb_clone_mnt_opts				Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ
sb_copy_data							∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅
sb_delete	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅							∅	∅	∅	∅	∅	∅	∅	∅
sb_eat_lsm_opts	∅	∅	∅	∅	∅	∅
sb_kern_mount							Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ
sb_mnt_opts_compat	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅							∅	∅	∅	∅	∅	∅	∅	∅
sb_mount		Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ
sb_parse_opts_str							∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅
sb_pivotroot		Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ
sb_remount							Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ
sb_set_mnt_opts							Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ
sb_show_options
sb_statfs
sb_umount
sctp_assoc_established	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅					∅	∅	∅	∅	∅	∅	∅	∅
sctp_assoc_request	∅	∅	∅	∅	∅									Δ	Δ	Δ	Δ
sctp_bind_connect	∅	∅	∅	∅	∅
sctp_sk_clone	∅	∅	∅	∅	∅									Δ	Δ	Δ	Δ
secctx_to_secid										Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ
secid_to_secctx										Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ
secmark_refcount_dec
secmark_refcount_inc
secmark_relabel_packet										Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ
sem_associate						Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ
sem_semctl						Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ
sem_semop						Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ
setprocattr				Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ
setselfattr	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅		∅	∅	∅	∅	∅	∅	∅	∅
settime		∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅
shm_associate						Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ
shm_shmat						Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ
shm_shmctl						Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ
socket_accept
socket_bind
socket_connect
socket_create
socket_getpeername
socket_getpeersec_dgram										Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ
socket_getpeersec_stream															Δ	Δ	Δ
socket_getsockname
socket_getsockopt
socket_listen
socket_post_create
socket_recvmsg
socket_sendmsg
socket_setsockopt
socket_shutdown
socket_socketpair	∅	∅	∅	∅	∅
sock_graft
syslog
task_alloc	∅	∅	∅
task_create					∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅
task_fix_setgid	∅	∅	∅	∅	∅	∅	∅	∅	∅									∅	∅	∅	∅	∅	∅	∅	∅
task_fix_setgroups	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅				∅	∅	∅	∅	∅	∅	∅	∅
task_fix_setuid
task_free
task_getioprio
task_getlsmblob_obj	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅		∅	∅	∅	∅	∅	∅	∅	∅
task_getpgid
task_getscheduler
task_getsecid										Δ	Δ	∅	∅	∅	∅	∅	∅
task_getsecid_obj	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅						∅	∅	∅	∅	∅	∅	∅	∅	∅
task_getsecid_subj	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅			∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅
task_getsid
task_kill						Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ	Δ
task_movememory
task_prctl
task_prlimit	∅	∅	∅
task_setioprio
task_setnice
task_setpgid
task_setrlimit
task_setscheduler
task_to_inode
task_wait				∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅
tun_dev_alloc_security
tun_dev_attach
tun_dev_attach_queue
tun_dev_create
tun_dev_free_security
tun_dev_open
unix_may_send
unix_stream_connect
uring_cmd	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅					∅	∅	∅	∅	∅	∅	∅	∅
uring_override_creds	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅					∅	∅	∅	∅	∅	∅	∅	∅
uring_sqpoll	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅	∅					∅	∅	∅	∅	∅	∅	∅	∅
watch_key	∅	∅	∅	∅	∅	∅	∅	∅	∅									∅	∅	∅	∅	∅	∅	∅	∅
xfrm_decode_session
xfrm_policy_lookup													Δ	Δ	Δ	Δ	Δ
xfrm_state_alloc
xfrm_state_alloc_acquire
xfrm_state_pol_flow_match											Δ	Δ	Δ	Δ	Δ	Δ	Δ