• Home
  • Raw
  • Download

Lines Matching refs:perms

135 				struct aa_perms *perms)  in label_compound_match()  argument
152 *perms = allperms; in label_compound_match()
164 *perms = aa_compute_fperms(profile->file.dfa, state, &cond); in label_compound_match()
165 aa_apply_modes_to_perms(profile, perms); in label_compound_match()
166 if ((perms->allow & request) != request) in label_compound_match()
172 *perms = nullperms; in label_compound_match()
195 struct aa_perms *perms) in label_components_match() argument
219 aa_perms_accum(perms, &tmp); in label_components_match()
228 aa_perms_accum(perms, &tmp); in label_components_match()
231 if ((perms->allow & request) != request) in label_components_match()
237 *perms = nullperms; in label_components_match()
255 struct aa_perms *perms) in label_match() argument
259 *perms = nullperms; in label_match()
261 request, perms); in label_match()
265 *perms = allperms; in label_match()
267 request, perms); in label_match()
289 struct aa_perms *perms) in change_profile_perms() argument
292 perms->allow = AA_MAY_CHANGE_PROFILE | AA_MAY_ONEXEC; in change_profile_perms()
293 perms->audit = perms->quiet = perms->kill = 0; in change_profile_perms()
298 return label_match(profile, target, stack, start, true, request, perms); in change_profile_perms()
630 struct aa_perms perms = {}; in profile_transition() local
663 state = aa_str_perms(profile->file.dfa, state, name, cond, &perms); in profile_transition()
664 if (perms.allow & MAY_EXEC) { in profile_transition()
666 new = x_to_label(profile, bprm, name, perms.xindex, &target, in profile_transition()
675 perms.allow &= ~MAY_EXEC; in profile_transition()
690 perms.xindex |= AA_X_UNSAFE; in profile_transition()
699 if (!(perms.xindex & AA_X_UNSAFE)) { in profile_transition()
710 aa_audit_file(profile, &perms, OP_EXEC, MAY_EXEC, name, target, new, in profile_transition()
726 struct aa_perms perms = {}; in profile_onexec() local
758 state = aa_str_perms(profile->file.dfa, state, xname, cond, &perms); in profile_onexec()
759 if (!(perms.allow & AA_MAY_ONEXEC)) { in profile_onexec()
769 state, &perms); in profile_onexec()
771 perms.allow &= ~AA_MAY_ONEXEC; in profile_onexec()
775 if (!(perms.xindex & AA_X_UNSAFE)) { in profile_onexec()
786 return aa_audit_file(profile, &perms, OP_EXEC, AA_MAY_ONEXEC, xname, in profile_onexec()
1152 struct aa_perms perms = {}; in aa_change_hat() local
1246 perms.kill = AA_MAY_CHANGEHAT; in aa_change_hat()
1250 aa_audit_file(profile, &perms, OP_CHANGE_HAT, in aa_change_hat()
1261 u32 request, struct aa_perms *perms) in change_profile_perms_wrapper() argument
1268 profile->file.start, perms); in change_profile_perms_wrapper()
1270 error = aa_audit_file(profile, perms, op, request, name, in change_profile_perms_wrapper()
1295 struct aa_perms perms = {}; in aa_change_profile() local
1378 request, &perms)); in aa_change_profile()
1431 perms.allow = 0; in aa_change_profile()
1447 aa_audit_file(profile, &perms, op, request, auditname, in aa_change_profile()