| /kernel/linux/linux-5.10/net/core/ |
| D | fib_rules.c | 37 bool fib_rule_matchall(const struct fib_rule *rule) in fib_rule_matchall() argument
39 if (rule->iifindex || rule->oifindex || rule->mark || rule->tun_id || in fib_rule_matchall()
40 rule->flags) in fib_rule_matchall()
42 if (rule->suppress_ifgroup != -1 || rule->suppress_prefixlen != -1) in fib_rule_matchall()
44 if (!uid_eq(rule->uid_range.start, fib_kuid_range_unset.start) || in fib_rule_matchall()
45 !uid_eq(rule->uid_range.end, fib_kuid_range_unset.end)) in fib_rule_matchall()
47 if (fib_rule_port_range_set(&rule->sport_range)) in fib_rule_matchall()
49 if (fib_rule_port_range_set(&rule->dport_range)) in fib_rule_matchall()
86 struct fib_rule *rule; in fib_default_rule_pref() local
91 rule = list_entry(pos->next, struct fib_rule, list); in fib_default_rule_pref()
[all …]
|
| D | flow_offload.c | 11 struct flow_rule *rule; in flow_rule_alloc() local
14 rule = kzalloc(struct_size(rule, action.entries, num_actions), in flow_rule_alloc()
16 if (!rule) in flow_rule_alloc()
19 rule->action.num_entries = num_actions; in flow_rule_alloc()
24 rule->action.entries[i].hw_stats = FLOW_ACTION_HW_STATS_DONT_CARE; in flow_rule_alloc()
26 return rule; in flow_rule_alloc()
37 void flow_rule_match_meta(const struct flow_rule *rule, in flow_rule_match_meta() argument
40 FLOW_DISSECTOR_MATCH(rule, FLOW_DISSECTOR_KEY_META, out); in flow_rule_match_meta()
44 void flow_rule_match_basic(const struct flow_rule *rule, in flow_rule_match_basic() argument
47 FLOW_DISSECTOR_MATCH(rule, FLOW_DISSECTOR_KEY_BASIC, out); in flow_rule_match_basic()
[all …]
|
| /kernel/linux/linux-4.19/net/core/ |
| D | fib_rules.c | 26 bool fib_rule_matchall(const struct fib_rule *rule) in fib_rule_matchall() argument
28 if (rule->iifindex || rule->oifindex || rule->mark || rule->tun_id || in fib_rule_matchall()
29 rule->flags) in fib_rule_matchall()
31 if (rule->suppress_ifgroup != -1 || rule->suppress_prefixlen != -1) in fib_rule_matchall()
33 if (!uid_eq(rule->uid_range.start, fib_kuid_range_unset.start) || in fib_rule_matchall()
34 !uid_eq(rule->uid_range.end, fib_kuid_range_unset.end)) in fib_rule_matchall()
36 if (fib_rule_port_range_set(&rule->sport_range)) in fib_rule_matchall()
38 if (fib_rule_port_range_set(&rule->dport_range)) in fib_rule_matchall()
75 struct fib_rule *rule; in fib_default_rule_pref() local
80 rule = list_entry(pos->next, struct fib_rule, list); in fib_default_rule_pref()
[all …]
|
| /kernel/linux/linux-5.10/drivers/net/dsa/sja1105/ |
| D | sja1105_flower.c | 10 struct sja1105_rule *rule; in sja1105_rule_find() local
12 list_for_each_entry(rule, &priv->flow_block.rules, list) in sja1105_rule_find()
13 if (rule->cookie == cookie) in sja1105_rule_find()
14 return rule; in sja1105_rule_find()
36 struct sja1105_rule *rule = sja1105_rule_find(priv, cookie); in sja1105_setup_bcast_policer() local
42 if (!rule) { in sja1105_setup_bcast_policer()
43 rule = kzalloc(sizeof(*rule), GFP_KERNEL); in sja1105_setup_bcast_policer()
44 if (!rule) in sja1105_setup_bcast_policer()
47 rule->cookie = cookie; in sja1105_setup_bcast_policer()
48 rule->type = SJA1105_RULE_BCAST_POLICER; in sja1105_setup_bcast_policer()
[all …]
|
| D | sja1105_vl.c | 12 struct sja1105_rule *rule, in sja1105_insert_gate_entry() argument
23 e->rule = rule; in sja1105_insert_gate_entry()
95 struct sja1105_rule *rule; in sja1105_compose_gating_subschedule() local
102 list_for_each_entry(rule, &priv->flow_block.rules, list) { in sja1105_compose_gating_subschedule()
103 if (rule->type != SJA1105_RULE_VL) in sja1105_compose_gating_subschedule()
105 if (rule->vl.type != SJA1105_VL_TIME_TRIGGERED) in sja1105_compose_gating_subschedule()
108 if (max_cycle_time < rule->vl.cycle_time) { in sja1105_compose_gating_subschedule()
109 max_cycle_time = rule->vl.cycle_time; in sja1105_compose_gating_subschedule()
110 its_base_time = rule->vl.base_time; in sja1105_compose_gating_subschedule()
124 list_for_each_entry(rule, &priv->flow_block.rules, list) { in sja1105_compose_gating_subschedule()
[all …]
|
| /kernel/linux/linux-5.10/security/selinux/include/ |
| D | audit.h | 16 * selinux_audit_rule_init - alloc/init an selinux audit rule structure.
17 * @field: the field this rule refers to
18 * @op: the operater the rule uses
19 * @rulestr: the text "target" of the rule
20 * @rule: pointer to the new rule structure returned via this
22 * Returns 0 if successful, -errno if not. On success, the rule structure
26 int selinux_audit_rule_init(u32 field, u32 op, char *rulestr, void **rule);
29 * selinux_audit_rule_free - free an selinux audit rule structure.
30 * @rule: pointer to the audit rule to be freed
32 * This will free all memory associated with the given rule.
[all …]
|
| /kernel/linux/linux-4.19/security/selinux/include/ |
| D | audit.h | 22 * selinux_audit_rule_init - alloc/init an selinux audit rule structure.
23 * @field: the field this rule refers to
24 * @op: the operater the rule uses
25 * @rulestr: the text "target" of the rule
26 * @rule: pointer to the new rule structure returned via this
28 * Returns 0 if successful, -errno if not. On success, the rule structure
32 int selinux_audit_rule_init(u32 field, u32 op, char *rulestr, void **rule);
35 * selinux_audit_rule_free - free an selinux audit rule structure.
36 * @rule: pointer to the audit rule to be freed
38 * This will free all memory associated with the given rule.
[all …]
|
| /kernel/linux/linux-5.10/drivers/net/ethernet/netronome/nfp/flower/ |
| D | match.c | 13 struct flow_rule *rule, u8 key_type, bool qinq_sup) in nfp_flower_compile_meta_tci() argument
27 if (!qinq_sup && flow_rule_match_key(rule, FLOW_DISSECTOR_KEY_VLAN)) { in nfp_flower_compile_meta_tci()
30 flow_rule_match_vlan(rule, &match); in nfp_flower_compile_meta_tci()
79 struct nfp_flower_mac_mpls *msk, struct flow_rule *rule, in nfp_flower_compile_mac() argument
85 if (flow_rule_match_key(rule, FLOW_DISSECTOR_KEY_ETH_ADDRS)) { in nfp_flower_compile_mac()
88 flow_rule_match_eth_addrs(rule, &match); in nfp_flower_compile_mac()
96 if (flow_rule_match_key(rule, FLOW_DISSECTOR_KEY_MPLS)) { in nfp_flower_compile_mac()
100 flow_rule_match_mpls(rule, &match); in nfp_flower_compile_mac()
125 } else if (flow_rule_match_key(rule, FLOW_DISSECTOR_KEY_BASIC)) { in nfp_flower_compile_mac()
132 flow_rule_match_basic(rule, &match); in nfp_flower_compile_mac()
[all …]
|
| /kernel/linux/linux-5.10/net/ipv6/ |
| D | fib6_rules.c | 31 static bool fib6_rule_matchall(const struct fib_rule *rule) in fib6_rule_matchall() argument
33 struct fib6_rule *r = container_of(rule, struct fib6_rule, common); in fib6_rule_matchall()
37 return fib_rule_matchall(rule); in fib6_rule_matchall()
40 bool fib6_rule_default(const struct fib_rule *rule) in fib6_rule_default() argument
42 if (!fib6_rule_matchall(rule) || rule->action != FR_ACT_TO_TBL || in fib6_rule_default()
43 rule->l3mdev) in fib6_rule_default()
45 if (rule->table != RT6_TABLE_LOCAL && rule->table != RT6_TABLE_MAIN) in fib6_rule_default()
132 static int fib6_rule_saddr(struct net *net, struct fib_rule *rule, int flags, in fib6_rule_saddr() argument
135 struct fib6_rule *r = (struct fib6_rule *)rule; in fib6_rule_saddr()
138 * we check the result if it meets requirement of the rule. in fib6_rule_saddr()
[all …]
|
| /kernel/linux/linux-4.19/net/ipv6/ |
| D | fib6_rules.c | 33 static bool fib6_rule_matchall(const struct fib_rule *rule) in fib6_rule_matchall() argument
35 struct fib6_rule *r = container_of(rule, struct fib6_rule, common); in fib6_rule_matchall()
39 return fib_rule_matchall(rule); in fib6_rule_matchall()
42 bool fib6_rule_default(const struct fib_rule *rule) in fib6_rule_default() argument
44 if (!fib6_rule_matchall(rule) || rule->action != FR_ACT_TO_TBL || in fib6_rule_default()
45 rule->l3mdev) in fib6_rule_default()
47 if (rule->table != RT6_TABLE_LOCAL && rule->table != RT6_TABLE_MAIN) in fib6_rule_default()
132 static int fib6_rule_saddr(struct net *net, struct fib_rule *rule, int flags, in fib6_rule_saddr() argument
135 struct fib6_rule *r = (struct fib6_rule *)rule; in fib6_rule_saddr()
138 * we check the result if it meets requirement of the rule. in fib6_rule_saddr()
[all …]
|
| /kernel/linux/linux-5.10/security/safesetid/ |
| D | securityfs.c | 32 struct setid_rule *rule) in parse_policy_line() argument
53 if (rule->type == UID){ in parse_policy_line()
54 rule->src_id.uid = make_kuid(file->f_cred->user_ns, parsed_parent); in parse_policy_line()
55 rule->dst_id.uid = make_kuid(file->f_cred->user_ns, parsed_child); in parse_policy_line()
56 if (!uid_valid(rule->src_id.uid) || !uid_valid(rule->dst_id.uid)) in parse_policy_line()
58 } else if (rule->type == GID){ in parse_policy_line()
59 rule->src_id.gid = make_kgid(file->f_cred->user_ns, parsed_parent); in parse_policy_line()
60 rule->dst_id.gid = make_kgid(file->f_cred->user_ns, parsed_child); in parse_policy_line()
61 if (!gid_valid(rule->src_id.gid) || !gid_valid(rule->dst_id.gid)) in parse_policy_line()
64 /* Error, rule->type is an invalid type */ in parse_policy_line()
[all …]
|
| /kernel/linux/linux-5.10/net/ipv4/ |
| D | fib_rules.c | 48 static bool fib4_rule_matchall(const struct fib_rule *rule) in fib4_rule_matchall() argument
50 struct fib4_rule *r = container_of(rule, struct fib4_rule, common); in fib4_rule_matchall()
54 return fib_rule_matchall(rule); in fib4_rule_matchall()
57 bool fib4_rule_default(const struct fib_rule *rule) in fib4_rule_default() argument
59 if (!fib4_rule_matchall(rule) || rule->action != FR_ACT_TO_TBL || in fib4_rule_default()
60 rule->l3mdev) in fib4_rule_default()
62 if (rule->table != RT_TABLE_LOCAL && rule->table != RT_TABLE_MAIN && in fib4_rule_default()
63 rule->table != RT_TABLE_DEFAULT) in fib4_rule_default()
94 if (arg.rule) in __fib_lookup()
95 res->tclassid = ((struct fib4_rule *)arg.rule)->tclassid; in __fib_lookup()
[all …]
|
| /kernel/linux/linux-4.19/net/ipv4/ |
| D | fib_rules.c | 50 static bool fib4_rule_matchall(const struct fib_rule *rule) in fib4_rule_matchall() argument
52 struct fib4_rule *r = container_of(rule, struct fib4_rule, common); in fib4_rule_matchall()
56 return fib_rule_matchall(rule); in fib4_rule_matchall()
59 bool fib4_rule_default(const struct fib_rule *rule) in fib4_rule_default() argument
61 if (!fib4_rule_matchall(rule) || rule->action != FR_ACT_TO_TBL || in fib4_rule_default()
62 rule->l3mdev) in fib4_rule_default()
64 if (rule->table != RT_TABLE_LOCAL && rule->table != RT_TABLE_MAIN && in fib4_rule_default()
65 rule->table != RT_TABLE_DEFAULT) in fib4_rule_default()
95 if (arg.rule) in __fib_lookup()
96 res->tclassid = ((struct fib4_rule *)arg.rule)->tclassid; in __fib_lookup()
[all …]
|
| /kernel/linux/linux-5.10/kernel/ |
| D | auditfilter.c | 84 struct audit_krule *erule = &e->rule; in audit_free_rule()
118 entry->rule.fields = fields; in audit_init_entry()
210 struct audit_field *arch = entry->rule.arch_f; in audit_match_signal()
216 entry->rule.mask) && in audit_match_signal()
218 entry->rule.mask)); in audit_match_signal()
224 entry->rule.mask)); in audit_match_signal()
227 entry->rule.mask)); in audit_match_signal()
234 /* Common user-space to kernel rule translation. */
235 static inline struct audit_entry *audit_to_entry_common(struct audit_rule_data *rule) in audit_to_entry_common() argument
242 listnr = rule->flags & ~AUDIT_FILTER_PREPEND; in audit_to_entry_common()
[all …]
|
| /kernel/linux/linux-4.19/kernel/ |
| D | auditfilter.c | 97 struct audit_krule *erule = &e->rule; in audit_free_rule()
131 entry->rule.fields = fields; in audit_init_entry()
223 struct audit_field *arch = entry->rule.arch_f; in audit_match_signal()
229 entry->rule.mask) && in audit_match_signal()
231 entry->rule.mask)); in audit_match_signal()
237 entry->rule.mask)); in audit_match_signal()
240 entry->rule.mask)); in audit_match_signal()
247 /* Common user-space to kernel rule translation. */
248 static inline struct audit_entry *audit_to_entry_common(struct audit_rule_data *rule) in audit_to_entry_common() argument
255 listnr = rule->flags & ~AUDIT_FILTER_PREPEND; in audit_to_entry_common()
[all …]
|
| /kernel/linux/linux-4.19/drivers/pnp/ |
| D | manager.c | 23 unsigned char rule, in pnp_find_resource() argument
29 /* when the resource already exists, set its resource bits from rule */ in pnp_find_resource()
32 res->flags |= rule & IORESOURCE_BITS; in pnp_find_resource()
38 static int pnp_assign_port(struct pnp_dev *dev, struct pnp_port *rule, int idx) in pnp_assign_port() argument
42 res = pnp_find_resource(dev, rule->flags, IORESOURCE_IO, idx); in pnp_assign_port()
51 res->flags = rule->flags | IORESOURCE_AUTO; in pnp_assign_port()
55 if (!rule->size) { in pnp_assign_port()
61 res->start = rule->min; in pnp_assign_port()
62 res->end = res->start + rule->size - 1; in pnp_assign_port()
65 res->start += rule->align; in pnp_assign_port()
[all …]
|
| /kernel/linux/linux-5.10/drivers/pnp/ |
| D | manager.c | 23 unsigned char rule, in pnp_find_resource() argument
29 /* when the resource already exists, set its resource bits from rule */ in pnp_find_resource()
32 res->flags |= rule & IORESOURCE_BITS; in pnp_find_resource()
38 static int pnp_assign_port(struct pnp_dev *dev, struct pnp_port *rule, int idx) in pnp_assign_port() argument
42 res = pnp_find_resource(dev, rule->flags, IORESOURCE_IO, idx); in pnp_assign_port()
51 res->flags = rule->flags | IORESOURCE_AUTO; in pnp_assign_port()
55 if (!rule->size) { in pnp_assign_port()
61 res->start = rule->min; in pnp_assign_port()
62 res->end = res->start + rule->size - 1; in pnp_assign_port()
65 res->start += rule->align; in pnp_assign_port()
[all …]
|
| /kernel/linux/linux-5.10/drivers/net/ethernet/mellanox/mlx5/core/steering/ |
| D | dr_rule.c | 355 dr_rule_rehash_htbl(struct mlx5dr_rule *rule, in dr_rule_rehash_htbl() argument
363 struct mlx5dr_matcher *matcher = rule->matcher; in dr_rule_rehash_htbl()
472 static struct mlx5dr_ste_htbl *dr_rule_rehash(struct mlx5dr_rule *rule, in dr_rule_rehash() argument
478 struct mlx5dr_domain *dmn = rule->matcher->tbl->dmn; in dr_rule_rehash()
487 return dr_rule_rehash_htbl(rule, nic_rule, cur_htbl, ste_location, in dr_rule_rehash()
530 static void dr_rule_remove_action_members(struct mlx5dr_rule *rule) in dr_rule_remove_action_members() argument
535 list_for_each_entry_safe(action_mem, tmp, &rule->rule_actions_list, list) { in dr_rule_remove_action_members()
542 static int dr_rule_add_action_members(struct mlx5dr_rule *rule, in dr_rule_add_action_members() argument
556 list_add_tail(&action_mem->list, &rule->rule_actions_list); in dr_rule_add_action_members()
563 dr_rule_remove_action_members(rule); in dr_rule_add_action_members()
[all …]
|
| /kernel/linux/linux-5.10/tools/testing/selftests/drivers/net/mlxsw/ |
| D | tc_restrictions.sh | 39 # shared block with a drop rule.
46 check_err $? "Failed to add drop rule to ingress bound block"
59 …check_err $? "Failed to create another clsact with egress shared block after blocker drop rule rem…
63 check_fail $? "Incorrect success to add drop rule to mixed bound block"
72 check_err $? "Failed to add drop rule to egress bound shared block"
95 check_err $? "Failed to add redirect rule to ingress bound block"
108 …check_err $? "Failed to create another clsact with egress shared block after blocker redirect rule…
113 check_fail $? "Incorrect success to add redirect rule to mixed bound block"
123 check_fail $? "Incorrect success to add redirect rule to egress bound shared block"
130 check_fail $? "Incorrect success to add redirect rule to egress bound block"
[all …]
|
| /kernel/linux/linux-5.10/Documentation/networking/ |
| D | tls-offload-reorder-good.svg | 1 …rule="nonzero"/></clipPath><g clip-path="url(#p.0)"><path fill="#000000" fill-opacity="0.0" d="m0 …
|
| D | tls-offload-reorder-bad.svg | 1 …rule="nonzero"/></clipPath><g clip-path="url(#p.0)"><path fill="#000000" fill-opacity="0.0" d="m0 …
|
| /kernel/linux/linux-4.19/Documentation/RCU/ |
| D | listRCU.txt | 37 if (audit_filter_rules(tsk, &e->rule, NULL, &state)) {
61 if (audit_filter_rules(tsk, &e->rule, NULL, &state)) {
78 static inline int audit_del_rule(struct audit_rule *rule,
85 if (!audit_compare_rule(rule, &e->rule)) {
92 return -EFAULT; /* No matching rule */
99 if (entry->rule.flags & AUDIT_PREPEND) {
100 entry->rule.flags &= ~AUDIT_PREPEND;
111 static inline int audit_del_rule(struct audit_rule *rule,
119 if (!audit_compare_rule(rule, &e->rule)) {
125 return -EFAULT; /* No matching rule */
[all …]
|
| /kernel/linux/linux-5.10/include/net/ |
| D | fib_rules.h | 53 struct fib_rule *rule; member
103 struct fib_rule *rule; member
126 static inline void fib_rule_get(struct fib_rule *rule) in fib_rule_get() argument
128 refcount_inc(&rule->refcnt); in fib_rule_get()
131 static inline void fib_rule_put(struct fib_rule *rule) in fib_rule_put() argument
133 if (refcount_dec_and_test(&rule->refcnt)) in fib_rule_put()
134 kfree_rcu(rule, rcu); in fib_rule_put()
138 static inline u32 fib_rule_get_table(struct fib_rule *rule, in fib_rule_get_table() argument
141 return rule->l3mdev ? arg->table : rule->table; in fib_rule_get_table()
144 static inline u32 fib_rule_get_table(struct fib_rule *rule, in fib_rule_get_table() argument
[all …]
|
| /kernel/linux/linux-5.10/drivers/net/ethernet/mellanox/mlxsw/ |
| D | spectrum_acl.c | 61 struct rhash_head ht_node; /* Member of rule HT */
699 struct mlxsw_sp_acl_rule *rule; in mlxsw_sp_acl_rule_create() local
703 rule = kzalloc(sizeof(*rule) + ops->rule_priv_size, in mlxsw_sp_acl_rule_create()
705 if (!rule) { in mlxsw_sp_acl_rule_create()
709 rule->cookie = cookie; in mlxsw_sp_acl_rule_create()
710 rule->ruleset = ruleset; in mlxsw_sp_acl_rule_create()
712 rule->rulei = mlxsw_sp_acl_rulei_create(mlxsw_sp->acl, afa_block); in mlxsw_sp_acl_rule_create()
713 if (IS_ERR(rule->rulei)) { in mlxsw_sp_acl_rule_create()
714 err = PTR_ERR(rule->rulei); in mlxsw_sp_acl_rule_create()
718 return rule; in mlxsw_sp_acl_rule_create()
[all …]
|
| D | spectrum_flower.c | 72 * to ingress/egress in future. Ingress rule is in mlxsw_sp_flower_parse_actions()
140 NL_SET_ERR_MSG_MOD(extack, "Multiple mirror actions per rule are not supported"); in mlxsw_sp_flower_parse_actions()
189 NL_SET_ERR_MSG_MOD(extack, "Multiple police actions per rule are not supported"); in mlxsw_sp_flower_parse_actions()
220 struct flow_rule *rule = flow_cls_offload_flow_rule(f); in mlxsw_sp_flower_parse_meta() local
225 if (!flow_rule_match_key(rule, FLOW_DISSECTOR_KEY_META)) in mlxsw_sp_flower_parse_meta()
228 flow_rule_match_meta(rule, &match); in mlxsw_sp_flower_parse_meta()
264 flow_rule_match_ipv4_addrs(f->rule, &match); in mlxsw_sp_flower_parse_ipv4()
279 flow_rule_match_ipv6_addrs(f->rule, &match); in mlxsw_sp_flower_parse_ipv6()
312 const struct flow_rule *rule = flow_cls_offload_flow_rule(f); in mlxsw_sp_flower_parse_ports() local
315 if (!flow_rule_match_key(rule, FLOW_DISSECTOR_KEY_PORTS)) in mlxsw_sp_flower_parse_ports()
[all …]
|
