| /security/tomoyo/ |
| D | file.c | 169 [r->param.path.operation], in tomoyo_audit_path_log()
170 r->param.path.filename->name); in tomoyo_audit_path_log()
183 [tomoyo_pp2mac[r->param.path2.operation]], in tomoyo_audit_path2_log()
184 r->param.path2.filename1->name, in tomoyo_audit_path2_log()
185 r->param.path2.filename2->name); in tomoyo_audit_path2_log()
199 [tomoyo_pnnn2mac[r->param.mkdev.operation]], in tomoyo_audit_mkdev_log()
200 r->param.mkdev.filename->name, in tomoyo_audit_mkdev_log()
201 r->param.mkdev.mode, r->param.mkdev.major, in tomoyo_audit_mkdev_log()
202 r->param.mkdev.minor); in tomoyo_audit_mkdev_log()
214 const u8 type = r->param.path_number.operation; in tomoyo_audit_path_number_log()
[all …]
|
| D | network.c | 50 bool tomoyo_parse_ipaddr_union(struct tomoyo_acl_param *param, in tomoyo_parse_ipaddr_union() argument
55 char *address = tomoyo_read_token(param); in tomoyo_parse_ipaddr_union()
282 int tomoyo_write_inet_network(struct tomoyo_acl_param *param) in tomoyo_write_inet_network() argument
287 const char *protocol = tomoyo_read_token(param); in tomoyo_write_inet_network()
288 const char *operation = tomoyo_read_token(param); in tomoyo_write_inet_network()
298 if (param->data[0] == '@') { in tomoyo_write_inet_network()
299 param->data++; in tomoyo_write_inet_network()
301 tomoyo_get_group(param, TOMOYO_ADDRESS_GROUP); in tomoyo_write_inet_network()
305 if (!tomoyo_parse_ipaddr_union(param, &e.address)) in tomoyo_write_inet_network()
308 if (!tomoyo_parse_number_union(param, &e.port) || in tomoyo_write_inet_network()
[all …]
|
| D | environ.c | 24 return tomoyo_path_matches_pattern(r->param.environ.name, acl->env); in tomoyo_check_env_acl()
37 r->param.environ.name->name); in tomoyo_audit_env_log()
60 r->param.environ.name = &environ; in tomoyo_env_perm()
94 static int tomoyo_write_env(struct tomoyo_acl_param *param) in tomoyo_write_env() argument
98 const char *data = tomoyo_read_token(param); in tomoyo_write_env()
105 error = tomoyo_update_domain(&e.head, sizeof(e), param, in tomoyo_write_env()
118 int tomoyo_write_misc(struct tomoyo_acl_param *param) in tomoyo_write_misc() argument
120 if (tomoyo_str_starts(¶m->data, "env ")) in tomoyo_write_misc()
121 return tomoyo_write_env(param); in tomoyo_write_misc()
|
| D | mount.c | 33 r->param.mount.dev->name, in tomoyo_audit_mount_log()
34 r->param.mount.dir->name, in tomoyo_audit_mount_log()
35 r->param.mount.type->name, in tomoyo_audit_mount_log()
36 r->param.mount.flags); in tomoyo_audit_mount_log()
53 return tomoyo_compare_number_union(r->param.mount.flags, in tomoyo_check_mount_acl()
55 tomoyo_compare_name_union(r->param.mount.type, in tomoyo_check_mount_acl()
57 tomoyo_compare_name_union(r->param.mount.dir, in tomoyo_check_mount_acl()
59 (!r->param.mount.need_dev || in tomoyo_check_mount_acl()
60 tomoyo_compare_name_union(r->param.mount.dev, in tomoyo_check_mount_acl()
159 r->param.mount.need_dev = need_dev; in tomoyo_mount_acl()
[all …]
|
| D | group.c | 74 int tomoyo_write_group(struct tomoyo_acl_param *param, const u8 type) in tomoyo_write_group() argument
76 struct tomoyo_group *group = tomoyo_get_group(param, type); in tomoyo_write_group()
81 param->list = &group->member_list; in tomoyo_write_group()
85 e.member_name = tomoyo_get_name(tomoyo_read_token(param)); in tomoyo_write_group()
90 error = tomoyo_update_policy(&e.head, sizeof(e), param, in tomoyo_write_group()
96 if (param->data[0] == '@' || in tomoyo_write_group()
97 !tomoyo_parse_number_union(param, &e.number)) in tomoyo_write_group()
99 error = tomoyo_update_policy(&e.head, sizeof(e), param, in tomoyo_write_group()
108 if (param->data[0] == '@' || in tomoyo_write_group()
109 !tomoyo_parse_ipaddr_union(param, &e.address)) in tomoyo_write_group()
[all …]
|
| D | domain.c | 32 struct tomoyo_acl_param *param, in tomoyo_update_policy() argument
38 int error = param->is_delete ? -ENOENT : -ENOMEM; in tomoyo_update_policy()
40 struct list_head *list = param->list; in tomoyo_update_policy()
50 entry->is_deleted = param->is_delete; in tomoyo_update_policy()
54 if (error && !param->is_delete) { in tomoyo_update_policy()
93 struct tomoyo_acl_param *param, in tomoyo_update_domain() argument
102 const bool is_delete = param->is_delete; in tomoyo_update_domain()
105 struct list_head * const list = param->list; in tomoyo_update_domain()
107 if (param->data[0]) { in tomoyo_update_domain()
108 new_entry->cond = tomoyo_get_condition(param); in tomoyo_update_domain()
[all …]
|
| D | util.c | 133 char *tomoyo_read_token(struct tomoyo_acl_param *param) in tomoyo_read_token() argument
135 char *pos = param->data; in tomoyo_read_token()
142 param->data = del; in tomoyo_read_token()
154 (struct tomoyo_acl_param *param) in tomoyo_get_domainname() argument
156 char *start = param->data; in tomoyo_get_domainname()
166 param->data = pos; in tomoyo_get_domainname()
245 bool tomoyo_parse_name_union(struct tomoyo_acl_param *param, in tomoyo_parse_name_union() argument
250 if (param->data[0] == '@') { in tomoyo_parse_name_union()
251 param->data++; in tomoyo_parse_name_union()
252 ptr->group = tomoyo_get_group(param, TOMOYO_PATH_GROUP); in tomoyo_parse_name_union()
[all …]
|
| D | common.h | 493 } param; member
944 bool tomoyo_parse_ipaddr_union(struct tomoyo_acl_param *param,
946 bool tomoyo_parse_name_union(struct tomoyo_acl_param *param,
948 bool tomoyo_parse_number_union(struct tomoyo_acl_param *param,
958 char *tomoyo_read_token(struct tomoyo_acl_param *param);
966 (struct tomoyo_acl_param *param);
1006 struct tomoyo_acl_param *param,
1014 struct tomoyo_acl_param *param,
1018 int tomoyo_write_aggregator(struct tomoyo_acl_param *param);
1019 int tomoyo_write_file(struct tomoyo_acl_param *param);
[all …]
|
| D | condition.c | 279 static bool tomoyo_parse_name_union_quoted(struct tomoyo_acl_param *param, in tomoyo_parse_name_union_quoted() argument
282 char *filename = param->data; in tomoyo_parse_name_union_quoted()
285 return tomoyo_parse_name_union(param, ptr); in tomoyo_parse_name_union_quoted()
454 static char *tomoyo_get_transit_preference(struct tomoyo_acl_param *param, in tomoyo_get_transit_preference() argument
457 char * const pos = param->data; in tomoyo_get_transit_preference()
461 e->transit = tomoyo_get_domainname(param); in tomoyo_get_transit_preference()
477 e->transit = tomoyo_get_name(tomoyo_read_token(param)); in tomoyo_get_transit_preference()
480 return param->data; in tomoyo_get_transit_preference()
495 struct tomoyo_condition *tomoyo_get_condition(struct tomoyo_acl_param *param) in tomoyo_get_condition() argument
505 tomoyo_get_transit_preference(param, &e); in tomoyo_get_condition()
[all …]
|
| D | memory.c | 95 struct tomoyo_group *tomoyo_get_group(struct tomoyo_acl_param *param, in tomoyo_get_group() argument
101 const char *group_name = tomoyo_read_token(param); in tomoyo_get_group()
111 list = ¶m->ns->group_list[idx]; in tomoyo_get_group()
|
| D | common.c | 865 struct tomoyo_acl_param param = { in tomoyo_update_manager_entry() local
877 error = tomoyo_update_policy(&e.head, sizeof(e), ¶m, in tomoyo_update_manager_entry()
1061 static int tomoyo_write_task(struct tomoyo_acl_param *param) in tomoyo_write_task() argument
1065 if (tomoyo_str_starts(¶m->data, "manual_domain_transition ")) { in tomoyo_write_task()
1068 .domainname = tomoyo_get_domainname(param), in tomoyo_write_task()
1072 error = tomoyo_update_domain(&e.head, sizeof(e), param, in tomoyo_write_task()
1130 struct tomoyo_acl_param param = { in tomoyo_write_domain2() local
1138 int (*write)(struct tomoyo_acl_param *param); in tomoyo_write_domain2()
1149 if (!tomoyo_str_starts(¶m.data, in tomoyo_write_domain2()
1152 return tomoyo_callback[i].write(¶m); in tomoyo_write_domain2()
[all …]
|
| D | securityfs_if.c | 25 return !tomoyo_pathcmp(r->param.task.domainname, acl->domainname); in tomoyo_check_task_acl()
63 r.param.task.domainname = &name; in tomoyo_write_self()
|
| /security/smack/ |
| D | smack_lsm.c | 707 struct fs_parameter *param) in smack_fs_context_parse_param() argument
712 opt = fs_parse(fc, &smack_fs_parameters, param, &result); in smack_fs_context_parse_param()
716 rc = smack_add_opt(opt, param->string, &fc->security); in smack_fs_context_parse_param()
718 param->string = NULL; in smack_fs_context_parse_param()
|
| /security/ |
| D | security.c | 805 int security_fs_context_parse_param(struct fs_context *fc, struct fs_parameter *param) in security_fs_context_parse_param() argument
807 return call_int_hook(fs_context_parse_param, -ENOPARAM, fc, param); in security_fs_context_parse_param()
|
| /security/selinux/ |
| D | hooks.c | 2834 struct fs_parameter *param) in selinux_fs_context_parse_param() argument
2839 opt = fs_parse(fc, &selinux_fs_parameters, param, &result); in selinux_fs_context_parse_param()
2843 rc = selinux_add_opt(opt, param->string, &fc->security); in selinux_fs_context_parse_param()
2845 param->string = NULL; in selinux_fs_context_parse_param()
|