| /security/tomoyo/ |
| D | network.c | 13 const __be32 *address; /* In network byte order. */ member
54 char *address = tomoyo_read_token(param); in tomoyo_parse_ipaddr_union() local
57 if (!strchr(address, ':') && in tomoyo_parse_ipaddr_union()
58 in4_pton(address, -1, min, '-', &end) > 0) { in tomoyo_parse_ipaddr_union()
67 if (in6_pton(address, -1, min, '-', &end) > 0) { in tomoyo_parse_ipaddr_union()
198 tomoyo_same_ipaddr_union(&p1->address, &p2->address) && in tomoyo_same_inet_acl()
299 e.address.group = in tomoyo_write_inet_network()
301 if (!e.address.group) in tomoyo_write_inet_network()
304 if (!tomoyo_parse_ipaddr_union(param, &e.address)) in tomoyo_write_inet_network()
314 tomoyo_put_group(e.address.group); in tomoyo_write_inet_network()
[all …]
|
| D | group.c | 60 return tomoyo_same_ipaddr_union(&p1->address, &p2->address); in tomoyo_same_address_group()
103 !tomoyo_parse_ipaddr_union(param, &e.address)) in tomoyo_write_group()
179 bool tomoyo_address_matches_group(const bool is_ipv6, const __be32 *address, in tomoyo_address_matches_group() argument
189 if (member->address.is_ipv6 != is_ipv6) in tomoyo_address_matches_group()
191 if (memcmp(&member->address.ip[0], address, size) > 0 || in tomoyo_address_matches_group()
192 memcmp(address, &member->address.ip[1], size) > 0) in tomoyo_address_matches_group()
|
| D | common.h | 464 const __be32 *address; member
473 const struct tomoyo_path_info *address; member
559 struct tomoyo_ipaddr_union address; member
762 struct tomoyo_ipaddr_union address; member
916 bool tomoyo_address_matches_group(const bool is_ipv6, const __be32 *address,
|
| D | common.c | 1486 if (ptr->address.group) { in tomoyo_print_entry()
1488 tomoyo_set_string(head, ptr->address.group->group_name in tomoyo_print_entry()
1492 tomoyo_print_ip(buf, sizeof(buf), &ptr->address); in tomoyo_print_entry()
1777 &member->address); in tomoyo_read_group()
|
| D | gc.c | 212 tomoyo_put_group(entry->address.group); in tomoyo_del_acl()
|
| /security/ |
| D | Kconfig | 49 to close hardware side channels on kernel address information.
124 int "Low address space for LSM to protect from user allocation"
133 For most ia64, ppc64 and x86 users with lots of address space
137 this low address space will need the permission specific to the
|
| D | security.c | 1216 int security_socket_bind(struct socket *sock, struct sockaddr *address, int addrlen) in security_socket_bind() argument
1218 return call_int_hook(socket_bind, 0, sock, address, addrlen); in security_socket_bind()
1221 int security_socket_connect(struct socket *sock, struct sockaddr *address, int addrlen) in security_socket_connect() argument
1223 return call_int_hook(socket_connect, 0, sock, address, addrlen); in security_socket_connect()
|
| /security/smack/ |
| D | smack_lsm.c | 2510 struct sockaddr_in6 *address, int act) in smk_ipv6_check() argument
2521 ad.a.u.net->dport = ntohs(address->sin6_port); in smk_ipv6_check()
2523 ad.a.u.net->v6info.saddr = address->sin6_addr; in smk_ipv6_check()
2525 ad.a.u.net->v6info.daddr = address->sin6_addr; in smk_ipv6_check()
2541 static void smk_ipv6_port_label(struct socket *sock, struct sockaddr *address) in smk_ipv6_port_label() argument
2549 if (address == NULL) { in smk_ipv6_port_label()
2569 addr6 = (struct sockaddr_in6 *)address; in smk_ipv6_port_label()
2614 static int smk_ipv6_port_check(struct sock *sk, struct sockaddr_in6 *address, in smk_ipv6_port_check() argument
2624 skp = smack_ipv6host_label(address); in smk_ipv6_port_check()
2628 object = smack_ipv6host_label(address); in smk_ipv6_port_check()
[all …]
|
| /security/selinux/ |
| D | hooks.c | 4139 static int selinux_socket_bind(struct socket *sock, struct sockaddr *address, int addrlen) in selinux_socket_bind() argument
4170 addr4 = (struct sockaddr_in *)address; in selinux_socket_bind()
4178 addr6 = (struct sockaddr_in6 *)address; in selinux_socket_bind()
4246 static int selinux_socket_connect(struct socket *sock, struct sockaddr *address, int addrlen) in selinux_socket_connect() argument
4269 addr4 = (struct sockaddr_in *)address; in selinux_socket_connect()
4274 addr6 = (struct sockaddr_in6 *)address; in selinux_socket_connect()
4296 err = selinux_netlbl_socket_connect(sk, address); in selinux_socket_connect()
|