• Home
  • Raw
  • Download

Lines Matching full:effective

45 			" effective capabilities. Therefore not raising all"  in warn_setuid_and_fcaps_mixed()
52 * cap_capable - Determine whether a task has a particular effective capability
59 * its effective set, returning 0 if it does, -ve if it does not.
193 * @effective: The place to record the effective set
200 int cap_capget(const struct task_struct *target, kernel_cap_t *effective, in cap_capget() argument
208 *effective = cred->cap_effective; in cap_capget()
234 * @effective: A pointer to the proposed new effective capabilities set
244 const kernel_cap_t *effective, in cap_capset() argument
266 if (!cap_issubset(*effective, *permitted)) in cap_capset()
269 new->cap_effective = *effective; in cap_capset()
588 bool *effective, in bprm_caps_from_vfs_caps() argument
595 *effective = true; in bprm_caps_from_vfs_caps()
617 return *effective ? ret : 0; in bprm_caps_from_vfs_caps()
724 bool *effective, bool *has_fcap) in get_file_caps() argument
756 rc = bprm_caps_from_vfs_caps(&vcaps, bprm, effective, has_fcap); in get_file_caps()
780 * @effective: Do we have effective root privilege?
786 * updated. If we have become set UID root, the effective bit is set.
789 bool *effective, kuid_t root_uid) in handle_privileged_root() argument
816 * If only the real uid is 0, we do not set the effective bit. in handle_privileged_root()
819 *effective = true; in handle_privileged_root()
857 if ((__cap_grew(effective, ambient, new) && in nonroot_raised_pE()
858 !(__cap_full(effective, new) && in nonroot_raised_pE()
863 !__cap_full(effective, new)) || in nonroot_raised_pE()
890 bool effective = false, has_fcap = false, is_setid; in cap_bprm_creds_from_file() local
897 ret = get_file_caps(bprm, file, &effective, &has_fcap); in cap_bprm_creds_from_file()
903 handle_privileged_root(bprm, has_fcap, &effective, root_uid); in cap_bprm_creds_from_file()
946 if (effective) in cap_bprm_creds_from_file()
968 (effective || in cap_bprm_creds_from_file()
1056 * cap_emulate_setxuid() fixes the effective / permitted capabilities of
1060 * {r,e,s}uid != 0, the permitted and effective capabilities are
1063 * 2) When set*uiding _from_ euid == 0 _to_ euid != 0, the effective
1066 * 3) When set*uiding _from_ euid != 0 _to_ euid == 0, the effective
1077 * effective sets will be retained.