Lines Matching refs:f
337 struct audit_field *f, in audit_compare_uid() argument
344 rc = audit_uid_comparator(uid, f->op, name->uid); in audit_compare_uid()
351 rc = audit_uid_comparator(uid, f->op, n->uid); in audit_compare_uid()
361 struct audit_field *f, in audit_compare_gid() argument
368 rc = audit_gid_comparator(gid, f->op, name->gid); in audit_compare_gid()
375 rc = audit_gid_comparator(gid, f->op, n->gid); in audit_compare_gid()
385 struct audit_field *f, in audit_field_compare() argument
389 switch (f->val) { in audit_field_compare()
392 return audit_compare_uid(cred->uid, name, f, ctx); in audit_field_compare()
394 return audit_compare_gid(cred->gid, name, f, ctx); in audit_field_compare()
396 return audit_compare_uid(cred->euid, name, f, ctx); in audit_field_compare()
398 return audit_compare_gid(cred->egid, name, f, ctx); in audit_field_compare()
400 return audit_compare_uid(audit_get_loginuid(tsk), name, f, ctx); in audit_field_compare()
402 return audit_compare_uid(cred->suid, name, f, ctx); in audit_field_compare()
404 return audit_compare_gid(cred->sgid, name, f, ctx); in audit_field_compare()
406 return audit_compare_uid(cred->fsuid, name, f, ctx); in audit_field_compare()
408 return audit_compare_gid(cred->fsgid, name, f, ctx); in audit_field_compare()
411 return audit_uid_comparator(cred->uid, f->op, in audit_field_compare()
414 return audit_uid_comparator(cred->uid, f->op, cred->euid); in audit_field_compare()
416 return audit_uid_comparator(cred->uid, f->op, cred->suid); in audit_field_compare()
418 return audit_uid_comparator(cred->uid, f->op, cred->fsuid); in audit_field_compare()
421 return audit_uid_comparator(audit_get_loginuid(tsk), f->op, in audit_field_compare()
424 return audit_uid_comparator(audit_get_loginuid(tsk), f->op, in audit_field_compare()
427 return audit_uid_comparator(audit_get_loginuid(tsk), f->op, in audit_field_compare()
431 return audit_uid_comparator(cred->euid, f->op, cred->suid); in audit_field_compare()
433 return audit_uid_comparator(cred->euid, f->op, cred->fsuid); in audit_field_compare()
436 return audit_uid_comparator(cred->suid, f->op, cred->fsuid); in audit_field_compare()
439 return audit_gid_comparator(cred->gid, f->op, cred->egid); in audit_field_compare()
441 return audit_gid_comparator(cred->gid, f->op, cred->sgid); in audit_field_compare()
443 return audit_gid_comparator(cred->gid, f->op, cred->fsgid); in audit_field_compare()
446 return audit_gid_comparator(cred->egid, f->op, cred->sgid); in audit_field_compare()
448 return audit_gid_comparator(cred->egid, f->op, cred->fsgid); in audit_field_compare()
451 return audit_gid_comparator(cred->sgid, f->op, cred->fsgid); in audit_field_compare()
482 struct audit_field *f = &rule->fields[i]; in audit_filter_rules() local
487 switch (f->type) { in audit_filter_rules()
490 result = audit_comparator(pid, f->op, f->val); in audit_filter_rules()
496 result = audit_comparator(ctx->ppid, f->op, f->val); in audit_filter_rules()
501 if (f->op == Audit_not_equal) in audit_filter_rules()
505 result = audit_uid_comparator(cred->uid, f->op, f->uid); in audit_filter_rules()
508 result = audit_uid_comparator(cred->euid, f->op, f->uid); in audit_filter_rules()
511 result = audit_uid_comparator(cred->suid, f->op, f->uid); in audit_filter_rules()
514 result = audit_uid_comparator(cred->fsuid, f->op, f->uid); in audit_filter_rules()
517 result = audit_gid_comparator(cred->gid, f->op, f->gid); in audit_filter_rules()
518 if (f->op == Audit_equal) { in audit_filter_rules()
520 result = groups_search(cred->group_info, f->gid); in audit_filter_rules()
521 } else if (f->op == Audit_not_equal) { in audit_filter_rules()
523 result = !groups_search(cred->group_info, f->gid); in audit_filter_rules()
527 result = audit_gid_comparator(cred->egid, f->op, f->gid); in audit_filter_rules()
528 if (f->op == Audit_equal) { in audit_filter_rules()
530 result = groups_search(cred->group_info, f->gid); in audit_filter_rules()
531 } else if (f->op == Audit_not_equal) { in audit_filter_rules()
533 result = !groups_search(cred->group_info, f->gid); in audit_filter_rules()
537 result = audit_gid_comparator(cred->sgid, f->op, f->gid); in audit_filter_rules()
540 result = audit_gid_comparator(cred->fsgid, f->op, f->gid); in audit_filter_rules()
544 result = audit_comparator(sessionid, f->op, f->val); in audit_filter_rules()
547 result = audit_comparator(tsk->personality, f->op, f->val); in audit_filter_rules()
551 result = audit_comparator(ctx->arch, f->op, f->val); in audit_filter_rules()
556 result = audit_comparator(ctx->return_code, f->op, f->val); in audit_filter_rules()
560 if (f->val) in audit_filter_rules()
561 result = audit_comparator(ctx->return_valid, f->op, AUDITSC_SUCCESS); in audit_filter_rules()
563 result = audit_comparator(ctx->return_valid, f->op, AUDITSC_FAILURE); in audit_filter_rules()
568 if (audit_comparator(MAJOR(name->dev), f->op, f->val) || in audit_filter_rules()
569 audit_comparator(MAJOR(name->rdev), f->op, f->val)) in audit_filter_rules()
573 if (audit_comparator(MAJOR(n->dev), f->op, f->val) || in audit_filter_rules()
574 audit_comparator(MAJOR(n->rdev), f->op, f->val)) { in audit_filter_rules()
583 if (audit_comparator(MINOR(name->dev), f->op, f->val) || in audit_filter_rules()
584 audit_comparator(MINOR(name->rdev), f->op, f->val)) in audit_filter_rules()
588 if (audit_comparator(MINOR(n->dev), f->op, f->val) || in audit_filter_rules()
589 audit_comparator(MINOR(n->rdev), f->op, f->val)) { in audit_filter_rules()
598 result = audit_comparator(name->ino, f->op, f->val); in audit_filter_rules()
601 if (audit_comparator(n->ino, f->op, f->val)) { in audit_filter_rules()
610 result = audit_uid_comparator(name->uid, f->op, f->uid); in audit_filter_rules()
613 if (audit_uid_comparator(n->uid, f->op, f->uid)) { in audit_filter_rules()
622 result = audit_gid_comparator(name->gid, f->op, f->gid); in audit_filter_rules()
625 if (audit_gid_comparator(n->gid, f->op, f->gid)) { in audit_filter_rules()
637 if (f->op == Audit_not_equal) in audit_filter_rules()
644 if (f->op == Audit_not_equal) in audit_filter_rules()
650 f->op, f->uid); in audit_filter_rules()
653 result = audit_comparator(audit_loginuid_set(tsk), f->op, f->val); in audit_filter_rules()
658 f->op, f->val); in audit_filter_rules()
670 if (f->lsm_rule) { in audit_filter_rules()
675 result = security_audit_rule_match(sid, f->type, in audit_filter_rules()
676 f->op, in audit_filter_rules()
677 f->lsm_rule); in audit_filter_rules()
687 if (f->lsm_rule) { in audit_filter_rules()
692 f->type, in audit_filter_rules()
693 f->op, in audit_filter_rules()
694 f->lsm_rule); in audit_filter_rules()
699 f->type, in audit_filter_rules()
700 f->op, in audit_filter_rules()
701 f->lsm_rule)) { in audit_filter_rules()
711 f->type, f->op, in audit_filter_rules()
712 f->lsm_rule)) in audit_filter_rules()
721 result = audit_comparator(ctx->argv[f->type-AUDIT_ARG0], f->op, f->val); in audit_filter_rules()
728 result = audit_match_perm(ctx, f->val); in audit_filter_rules()
729 if (f->op == Audit_not_equal) in audit_filter_rules()
733 result = audit_match_filetype(ctx, f->val); in audit_filter_rules()
734 if (f->op == Audit_not_equal) in audit_filter_rules()
738 result = audit_field_compare(tsk, cred, f, ctx, name); in audit_filter_rules()
2055 struct audit_field *f = &e->rule.fields[i]; in __audit_inode() local
2057 if (f->type == AUDIT_FSTYPE in __audit_inode()
2059 f->op, f->val) in __audit_inode()
2173 struct audit_field *f = &e->rule.fields[i]; in __audit_inode_child() local
2175 if (f->type == AUDIT_FSTYPE in __audit_inode_child()
2177 f->op, f->val) in __audit_inode_child()