| /security/keys/ |
| D | process_keys.c | 226 struct key *old; in install_session_keyring_to_cred() local
246 old = cred->tgcred->session_keyring; in install_session_keyring_to_cred()
252 if (old) { in install_session_keyring_to_cred()
254 key_put(old); in install_session_keyring_to_cred()
764 const struct cred *old; in join_session_keyring() local
778 old = current_cred(); in join_session_keyring()
800 keyring = keyring_alloc(name, old->uid, old->gid, old, in join_session_keyring()
837 const struct cred *old; in key_replace_session_keyring() local
851 old = current_cred(); in key_replace_session_keyring()
852 new-> uid = old-> uid; in key_replace_session_keyring()
[all …]
|
| /security/ |
| D | commoncap.c | 248 const struct cred *old, in cap_capset() argument
255 cap_combine(old->cap_inheritable, in cap_capset()
256 old->cap_permitted))) in cap_capset()
261 cap_combine(old->cap_inheritable, in cap_capset()
262 old->cap_bset))) in cap_capset()
267 if (!cap_issubset(*permitted, old->cap_permitted)) in cap_capset()
483 const struct cred *old = current_cred(); in cap_bprm_set_creds() local
512 new->cap_permitted = cap_combine(old->cap_bset, in cap_bprm_set_creds()
513 old->cap_inheritable); in cap_bprm_set_creds()
521 if (!cap_issubset(new->cap_permitted, old->cap_permitted)) in cap_bprm_set_creds()
[all …]
|
| D | security.c | 171 int security_capset(struct cred *new, const struct cred *old, in security_capset() argument
176 return security_ops->capset(new, old, in security_capset()
755 int security_prepare_creds(struct cred *new, const struct cred *old, gfp_t gfp) in security_prepare_creds() argument
757 return security_ops->cred_prepare(new, old, gfp); in security_prepare_creds()
760 void security_transfer_creds(struct cred *new, const struct cred *old) in security_transfer_creds() argument
762 security_ops->cred_transfer(new, old); in security_transfer_creds()
780 int security_task_fix_setuid(struct cred *new, const struct cred *old, in security_task_fix_setuid() argument
783 return security_ops->task_fix_setuid(new, old, flags); in security_task_fix_setuid()
|
| D | capability.c | 394 static int cap_cred_prepare(struct cred *new, const struct cred *old, gfp_t gfp) in cap_cred_prepare() argument
399 static void cap_cred_transfer(struct cred *new, const struct cred *old) in cap_cred_transfer() argument
|
| /security/apparmor/ |
| D | resource.c | 112 void __aa_transition_rlimits(struct aa_profile *old, struct aa_profile *new) in __aa_transition_rlimits() argument
121 if (old->rlimits.mask) { in __aa_transition_rlimits()
123 if (old->rlimits.mask & mask) { in __aa_transition_rlimits()
|
| D | file.c | 160 static u32 map_old_perms(u32 old) in map_old_perms() argument
162 u32 new = old & 0xf; in map_old_perms()
163 if (old & MAY_READ) in map_old_perms()
165 if (old & MAY_WRITE) in map_old_perms()
168 if (old & 0x10) in map_old_perms()
173 if (old & 0x20) in map_old_perms()
175 if (old & 0x40) /* AA_EXEC_MMAP */ in map_old_perms()
|
| D | policy.c | 487 static void __replace_profile(struct aa_profile *old, struct aa_profile *new) in __replace_profile() argument
492 if (old->parent) in __replace_profile()
493 policy = &old->parent->base; in __replace_profile()
495 policy = &old->ns->base; in __replace_profile()
498 new->parent = aa_get_profile(old->parent); in __replace_profile()
499 new->ns = aa_get_namespace(old->ns); in __replace_profile()
500 new->sid = old->sid; in __replace_profile()
503 list_for_each_entry_safe(child, tmp, &old->base.profiles, base.list) { in __replace_profile()
511 old->replacedby = aa_get_profile(new); in __replace_profile()
512 __list_remove_profile(old); in __replace_profile()
|
| D | context.c | 63 void aa_dup_task_context(struct aa_task_cxt *new, const struct aa_task_cxt *old) in aa_dup_task_context() argument
65 *new = *old; in aa_dup_task_context()
|
| D | lsm.c | 72 static int apparmor_cred_prepare(struct cred *new, const struct cred *old, in apparmor_cred_prepare() argument
80 aa_dup_task_context(cxt, old->security); in apparmor_cred_prepare()
88 static void apparmor_cred_transfer(struct cred *new, const struct cred *old) in apparmor_cred_transfer() argument
90 const struct aa_task_cxt *old_cxt = old->security; in apparmor_cred_transfer()
|
| /security/tomoyo/ |
| D | tomoyo.c | 33 static int tomoyo_cred_prepare(struct cred *new, const struct cred *old, in tomoyo_cred_prepare() argument
36 struct tomoyo_domain_info *domain = old->security; in tomoyo_cred_prepare()
49 static void tomoyo_cred_transfer(struct cred *new, const struct cred *old) in tomoyo_cred_transfer() argument
51 tomoyo_cred_prepare(new, old, 0); in tomoyo_cred_transfer()
|
| /security/apparmor/include/ |
| D | resource.h | 43 void __aa_transition_rlimits(struct aa_profile *old, struct aa_profile *new);
|
| D | context.h | 78 const struct aa_task_cxt *old);
|
| /security/selinux/ |
| D | avc.c | 499 static void avc_node_replace(struct avc_node *new, struct avc_node *old) in avc_node_replace() argument
501 hlist_replace_rcu(&old->list, &new->list); in avc_node_replace()
502 call_rcu(&old->rhead, avc_node_free); in avc_node_replace()
|
| D | hooks.c | 1961 static int selinux_capset(struct cred *new, const struct cred *old, in selinux_capset() argument
1968 error = cap_capset(new, old, in selinux_capset()
1973 return cred_has_perm(old, new, PROCESS__SETCAP); in selinux_capset()
3450 static int selinux_cred_prepare(struct cred *new, const struct cred *old, in selinux_cred_prepare() argument
3456 old_tsec = old->security; in selinux_cred_prepare()
3469 static void selinux_cred_transfer(struct cred *new, const struct cred *old) in selinux_cred_transfer() argument
3471 const struct task_security_struct *old_tsec = old->security; in selinux_cred_transfer()
|
| /security/smack/ |
| D | smack_lsm.c | 1428 static int smack_cred_prepare(struct cred *new, const struct cred *old, in smack_cred_prepare() argument
1431 struct task_smack *old_tsp = old->security; in smack_cred_prepare()
1454 static void smack_cred_transfer(struct cred *new, const struct cred *old) in smack_cred_transfer() argument
1456 struct task_smack *old_tsp = old->security; in smack_cred_transfer()
|