Lines Matching refs:err
3300 int err = 0; in selinux_file_fcntl() local
3305 err = -EINVAL; in selinux_file_fcntl()
3310 err = file_has_perm(cred, file, FILE__WRITE); in selinux_file_fcntl()
3320 err = file_has_perm(cred, file, 0); in selinux_file_fcntl()
3331 err = -EINVAL; in selinux_file_fcntl()
3334 err = file_has_perm(cred, file, FILE__LOCK); in selinux_file_fcntl()
3338 return err; in selinux_file_fcntl()
3866 int err; in selinux_skb_peerlbl_sid() local
3874 err = security_net_peersid_resolve(nlbl_sid, nlbl_type, xfrm_sid, sid); in selinux_skb_peerlbl_sid()
3875 if (unlikely(err)) { in selinux_skb_peerlbl_sid()
3943 int err = 0; in selinux_socket_post_create() local
3950 err = socket_sockcreate_sid(tsec, isec->sclass, &(isec->sid)); in selinux_socket_post_create()
3951 if (err) in selinux_socket_post_create()
3952 return err; in selinux_socket_post_create()
3961 err = selinux_netlbl_socket_post_create(sock->sk, family); in selinux_socket_post_create()
3964 return err; in selinux_socket_post_create()
3975 int err; in selinux_socket_bind() local
3977 err = sock_has_perm(current, sk, SOCKET__BIND); in selinux_socket_bind()
3978 if (err) in selinux_socket_bind()
4014 err = sel_netport_sid(sk->sk_protocol, in selinux_socket_bind()
4016 if (err) in selinux_socket_bind()
4023 err = avc_has_perm(sksec->sid, sid, in selinux_socket_bind()
4026 if (err) in selinux_socket_bind()
4049 err = sel_netnode_sid(addrp, family, &sid); in selinux_socket_bind()
4050 if (err) in selinux_socket_bind()
4064 err = avc_has_perm(sksec->sid, sid, in selinux_socket_bind()
4066 if (err) in selinux_socket_bind()
4070 return err; in selinux_socket_bind()
4077 int err; in selinux_socket_connect() local
4079 err = sock_has_perm(current, sk, SOCKET__CONNECT); in selinux_socket_connect()
4080 if (err) in selinux_socket_connect()
4081 return err; in selinux_socket_connect()
4108 err = sel_netport_sid(sk->sk_protocol, snum, &sid); in selinux_socket_connect()
4109 if (err) in selinux_socket_connect()
4120 err = avc_has_perm(sksec->sid, sid, sksec->sclass, perm, &ad); in selinux_socket_connect()
4121 if (err) in selinux_socket_connect()
4125 err = selinux_netlbl_socket_connect(sk, address); in selinux_socket_connect()
4128 return err; in selinux_socket_connect()
4138 int err; in selinux_socket_accept() local
4142 err = sock_has_perm(current, sock->sk, SOCKET__ACCEPT); in selinux_socket_accept()
4143 if (err) in selinux_socket_accept()
4144 return err; in selinux_socket_accept()
4180 int err; in selinux_socket_setsockopt() local
4182 err = sock_has_perm(current, sock->sk, SOCKET__SETOPT); in selinux_socket_setsockopt()
4183 if (err) in selinux_socket_setsockopt()
4184 return err; in selinux_socket_setsockopt()
4210 int err; in selinux_socket_unix_stream_connect() local
4217 err = avc_has_perm(sksec_sock->sid, sksec_other->sid, in selinux_socket_unix_stream_connect()
4220 if (err) in selinux_socket_unix_stream_connect()
4221 return err; in selinux_socket_unix_stream_connect()
4225 err = security_sid_mls_copy(sksec_other->sid, sksec_sock->sid, in selinux_socket_unix_stream_connect()
4227 if (err) in selinux_socket_unix_stream_connect()
4228 return err; in selinux_socket_unix_stream_connect()
4258 int err; in selinux_inet_sys_rcv_skb() local
4262 err = sel_netif_sid(ifindex, &if_sid); in selinux_inet_sys_rcv_skb()
4263 if (err) in selinux_inet_sys_rcv_skb()
4264 return err; in selinux_inet_sys_rcv_skb()
4265 err = avc_has_perm(peer_sid, if_sid, in selinux_inet_sys_rcv_skb()
4267 if (err) in selinux_inet_sys_rcv_skb()
4268 return err; in selinux_inet_sys_rcv_skb()
4270 err = sel_netnode_sid(addrp, family, &node_sid); in selinux_inet_sys_rcv_skb()
4271 if (err) in selinux_inet_sys_rcv_skb()
4272 return err; in selinux_inet_sys_rcv_skb()
4280 int err = 0; in selinux_sock_rcv_skb_compat() local
4293 err = selinux_parse_skb(skb, &ad, &addrp, 1, NULL); in selinux_sock_rcv_skb_compat()
4294 if (err) in selinux_sock_rcv_skb_compat()
4295 return err; in selinux_sock_rcv_skb_compat()
4298 err = avc_has_perm(sk_sid, skb->secmark, SECCLASS_PACKET, in selinux_sock_rcv_skb_compat()
4300 if (err) in selinux_sock_rcv_skb_compat()
4301 return err; in selinux_sock_rcv_skb_compat()
4304 err = selinux_netlbl_sock_rcv_skb(sksec, skb, family, &ad); in selinux_sock_rcv_skb_compat()
4305 if (err) in selinux_sock_rcv_skb_compat()
4306 return err; in selinux_sock_rcv_skb_compat()
4307 err = selinux_xfrm_sock_rcv_skb(sksec->sid, skb, &ad); in selinux_sock_rcv_skb_compat()
4309 return err; in selinux_sock_rcv_skb_compat()
4314 int err; in selinux_socket_sock_rcv_skb() local
4349 err = selinux_parse_skb(skb, &ad, &addrp, 1, NULL); in selinux_socket_sock_rcv_skb()
4350 if (err) in selinux_socket_sock_rcv_skb()
4351 return err; in selinux_socket_sock_rcv_skb()
4356 err = selinux_skb_peerlbl_sid(skb, family, &peer_sid); in selinux_socket_sock_rcv_skb()
4357 if (err) in selinux_socket_sock_rcv_skb()
4358 return err; in selinux_socket_sock_rcv_skb()
4359 err = selinux_inet_sys_rcv_skb(skb->skb_iif, addrp, family, in selinux_socket_sock_rcv_skb()
4361 if (err) { in selinux_socket_sock_rcv_skb()
4362 selinux_netlbl_err(skb, err, 0); in selinux_socket_sock_rcv_skb()
4363 return err; in selinux_socket_sock_rcv_skb()
4365 err = avc_has_perm(sk_sid, peer_sid, SECCLASS_PEER, in selinux_socket_sock_rcv_skb()
4367 if (err) in selinux_socket_sock_rcv_skb()
4368 selinux_netlbl_err(skb, err, 0); in selinux_socket_sock_rcv_skb()
4372 err = avc_has_perm(sk_sid, skb->secmark, SECCLASS_PACKET, in selinux_socket_sock_rcv_skb()
4374 if (err) in selinux_socket_sock_rcv_skb()
4375 return err; in selinux_socket_sock_rcv_skb()
4378 return err; in selinux_socket_sock_rcv_skb()
4384 int err = 0; in selinux_socket_getpeersec_stream() local
4396 err = security_sid_to_context(peer_sid, &scontext, &scontext_len); in selinux_socket_getpeersec_stream()
4397 if (err) in selinux_socket_getpeersec_stream()
4398 return err; in selinux_socket_getpeersec_stream()
4401 err = -ERANGE; in selinux_socket_getpeersec_stream()
4406 err = -EFAULT; in selinux_socket_getpeersec_stream()
4410 err = -EFAULT; in selinux_socket_getpeersec_stream()
4412 return err; in selinux_socket_getpeersec_stream()
4504 int err; in selinux_inet_conn_request() local
4513 err = selinux_skb_peerlbl_sid(skb, family, &peersid); in selinux_inet_conn_request()
4514 if (err) in selinux_inet_conn_request()
4515 return err; in selinux_inet_conn_request()
4520 err = security_sid_mls_copy(sksec->sid, peersid, &newsid); in selinux_inet_conn_request()
4521 if (err) in selinux_inet_conn_request()
4522 return err; in selinux_inet_conn_request()
4623 int err; in selinux_tun_dev_attach() local
4625 err = avc_has_perm(sid, sksec->sid, SECCLASS_TUN_SOCKET, in selinux_tun_dev_attach()
4627 if (err) in selinux_tun_dev_attach()
4628 return err; in selinux_tun_dev_attach()
4629 err = avc_has_perm(sid, sid, SECCLASS_TUN_SOCKET, in selinux_tun_dev_attach()
4631 if (err) in selinux_tun_dev_attach()
4632 return err; in selinux_tun_dev_attach()
4641 int err = 0; in selinux_nlmsg_perm() local
4647 err = -EINVAL; in selinux_nlmsg_perm()
4652 err = selinux_nlmsg_lookup(sksec->sclass, nlh->nlmsg_type, &perm); in selinux_nlmsg_perm()
4653 if (err) { in selinux_nlmsg_perm()
4654 if (err == -EINVAL) { in selinux_nlmsg_perm()
4660 err = 0; in selinux_nlmsg_perm()
4664 if (err == -ENOENT) in selinux_nlmsg_perm()
4665 err = 0; in selinux_nlmsg_perm()
4669 err = sock_has_perm(current, sk, perm); in selinux_nlmsg_perm()
4671 return err; in selinux_nlmsg_perm()
4679 int err; in selinux_ip_forward() local
4710 err = selinux_inet_sys_rcv_skb(ifindex, addrp, family, in selinux_ip_forward()
4712 if (err) { in selinux_ip_forward()
4713 selinux_netlbl_err(skb, err, 1); in selinux_ip_forward()
4931 int err; in selinux_netlink_send() local
4933 err = cap_netlink_send(sk, skb); in selinux_netlink_send()
4934 if (err) in selinux_netlink_send()
4935 return err; in selinux_netlink_send()
5067 int err; in selinux_msg_queue_msgctl() local
5089 err = ipc_has_perm(&msq->q_perm, perms); in selinux_msg_queue_msgctl()
5090 return err; in selinux_msg_queue_msgctl()
5218 int err; in selinux_shm_shmctl() local
5243 err = ipc_has_perm(&shp->shm_perm, perms); in selinux_shm_shmctl()
5244 return err; in selinux_shm_shmctl()
5313 int err; in selinux_sem_semctl() local
5348 err = ipc_has_perm(&sma->sem_perm, perms); in selinux_sem_semctl()
5349 return err; in selinux_sem_semctl()
5976 int err = 0; in selinux_nf_ip_init() local
5983 err = nf_register_hooks(selinux_ipv4_ops, ARRAY_SIZE(selinux_ipv4_ops)); in selinux_nf_ip_init()
5984 if (err) in selinux_nf_ip_init()
5985 panic("SELinux: nf_register_hooks for IPv4: error %d\n", err); in selinux_nf_ip_init()
5988 err = nf_register_hooks(selinux_ipv6_ops, ARRAY_SIZE(selinux_ipv6_ops)); in selinux_nf_ip_init()
5989 if (err) in selinux_nf_ip_init()
5990 panic("SELinux: nf_register_hooks for IPv6: error %d\n", err); in selinux_nf_ip_init()
5994 return err; in selinux_nf_ip_init()