| /security/selinux/include/ |
| D | security.h | 115 static inline bool selinux_initialized(const struct selinux_state *state) in selinux_initialized()
121 static inline void selinux_mark_initialized(struct selinux_state *state) in selinux_mark_initialized()
128 static inline bool enforcing_enabled(struct selinux_state *state) in enforcing_enabled()
133 static inline void enforcing_set(struct selinux_state *state, bool value) in enforcing_set()
138 static inline bool enforcing_enabled(struct selinux_state *state) in enforcing_enabled()
143 static inline void enforcing_set(struct selinux_state *state, bool value) in enforcing_set()
148 static inline bool checkreqprot_get(const struct selinux_state *state) in checkreqprot_get()
153 static inline void checkreqprot_set(struct selinux_state *state, bool value) in checkreqprot_set()
159 static inline bool selinux_disabled(struct selinux_state *state) in selinux_disabled()
164 static inline void selinux_mark_disabled(struct selinux_state *state) in selinux_mark_disabled()
[all …]
|
| D | avc.h | 55 struct selinux_state *state; member
124 static inline int avc_audit(struct selinux_state *state, in avc_audit()
|
| /security/apparmor/include/ |
| D | file.h | 143 #define dfa_user_allow(dfa, state) (((ACCEPT_TABLE(dfa)[state]) & 0x7f) | \ argument
145 #define dfa_user_audit(dfa, state) ((ACCEPT_TABLE2(dfa)[state]) & 0x7f) argument
146 #define dfa_user_quiet(dfa, state) (((ACCEPT_TABLE2(dfa)[state]) >> 7) & 0x7f) argument
147 #define dfa_user_xindex(dfa, state) \ argument
150 #define dfa_other_allow(dfa, state) ((((ACCEPT_TABLE(dfa)[state]) >> 14) & \ argument
153 #define dfa_other_audit(dfa, state) (((ACCEPT_TABLE2(dfa)[state]) >> 14) & 0x7f) argument
154 #define dfa_other_quiet(dfa, state) \ argument
156 #define dfa_other_xindex(dfa, state) \ argument
|
| D | label.h | 337 unsigned int state; in aa_label_strn_split() local
349 unsigned int state; in aa_label_str_split() local
|
| D | policy.h | 228 unsigned int state = PROFILE_MEDIATES(profile, AA_CLASS_NET); in PROFILE_MEDIATES_AF() local
|
| /security/selinux/ss/ |
| D | services.c | 74 struct selinux_state *state; member
246 int security_mls_enabled(struct selinux_state *state) in security_mls_enabled()
726 static int security_validtrans_handle_fail(struct selinux_state *state, in security_validtrans_handle_fail()
758 static int security_compute_validatetrans(struct selinux_state *state, in security_compute_validatetrans()
842 int security_validate_transition_user(struct selinux_state *state, in security_validate_transition_user()
850 int security_validate_transition(struct selinux_state *state, in security_validate_transition()
868 int security_bounded_transition(struct selinux_state *state, in security_bounded_transition()
1017 void security_compute_xperms_decision(struct selinux_state *state, in security_compute_xperms_decision()
1114 void security_compute_av(struct selinux_state *state, in security_compute_av()
1173 void security_compute_av_user(struct selinux_state *state, in security_compute_av_user()
[all …]
|
| D | policydb.h | 151 int state; member
|
| /security/selinux/ |
| D | status.c | 42 struct page *selinux_kernel_status_page(struct selinux_state *state) in selinux_kernel_status_page()
79 void selinux_status_update_setenforce(struct selinux_state *state, in selinux_status_update_setenforce()
105 void selinux_status_update_policyload(struct selinux_state *state, in selinux_status_update_policyload()
|
| D | ima.c | 23 static char *selinux_ima_collect_state(struct selinux_state *state) in selinux_ima_collect_state()
73 void selinux_ima_measure_state_locked(struct selinux_state *state) in selinux_ima_measure_state_locked()
118 void selinux_ima_measure_state(struct selinux_state *state) in selinux_ima_measure_state()
|
| D | selinuxfs.c | 80 struct selinux_state *state; member
143 struct selinux_state *state = fsi->state; in sel_write_enforce() local
208 struct selinux_state *state = fsi->state; in sel_read_handle_unknown() local
398 struct selinux_state *state = fsi->state; in sel_open_policy() local
679 struct selinux_state *state = fsi->state; in sel_write_context() local
782 struct selinux_state *state = fsi->state; in sel_write_validatetrans() local
911 struct selinux_state *state = fsi->state; in sel_write_access() local
962 struct selinux_state *state = fsi->state; in sel_write_create() local
1066 struct selinux_state *state = fsi->state; in sel_write_relabel() local
1127 struct selinux_state *state = fsi->state; in sel_write_user() local
[all …]
|
| D | avc.c | 420 static inline int avc_xperms_audit(struct selinux_state *state, in avc_xperms_audit()
775 noinline int slow_avc_audit(struct selinux_state *state, in slow_avc_audit()
1000 struct avc_node *avc_compute_av(struct selinux_state *state, in avc_compute_av()
1012 static noinline int avc_denied(struct selinux_state *state, in avc_denied()
1037 int avc_has_extended_perms(struct selinux_state *state, in avc_has_extended_perms()
1134 inline int avc_has_perm_noaudit(struct selinux_state *state, in avc_has_perm_noaudit()
1181 int avc_has_perm(struct selinux_state *state, u32 ssid, u32 tsid, u16 tclass, in avc_has_perm()
1197 u32 avc_policy_seqno(struct selinux_state *state) in avc_policy_seqno()
|
| D | hooks.c | 5792 const struct nf_hook_state *state) in selinux_ipv4_forward()
5800 const struct nf_hook_state *state) in selinux_ipv6_forward()
5850 const struct nf_hook_state *state) in selinux_ipv4_output()
5858 const struct nf_hook_state *state) in selinux_ipv6_output()
6040 const struct nf_hook_state *state) in selinux_ipv4_postroute()
6048 const struct nf_hook_state *state) in selinux_ipv6_postroute()
7606 int selinux_disable(struct selinux_state *state) in selinux_disable()
|
| /security/apparmor/ |
| D | match.c | 409 #define match_char(state, def, base, next, check, C) \ argument
446 unsigned int state = start; in aa_dfa_match_len() local
486 unsigned int state = start; in aa_dfa_match() local
518 unsigned int aa_dfa_next(struct aa_dfa *dfa, unsigned int state, in aa_dfa_next()
537 unsigned int aa_dfa_outofband_transition(struct aa_dfa *dfa, unsigned int state) in aa_dfa_outofband_transition()
575 unsigned int state = start, pos; in aa_dfa_match_until() local
636 unsigned int state = start, pos; in aa_dfa_matchn_until() local
680 static bool is_loop(struct match_workbuf *wb, unsigned int state, in is_loop()
711 unsigned int state = start, pos; in leftmatch_fb() local
|
| D | domain.c | 101 bool stack, unsigned int state) in match_component()
136 unsigned int state, bool subns, u32 request, in label_compound_match()
203 unsigned int state = 0; in label_components_match() local
256 bool stack, unsigned int state, bool subns, u32 request, in label_match()
312 struct aa_profile *profile, unsigned int state) in aa_xattrs_match()
418 unsigned int state, count; in find_attach() local
631 unsigned int state = profile->file.start; in profile_transition() local
727 unsigned int state = profile->file.start; in profile_onexec() local
|
| D | mount.c | 193 static unsigned int match_mnt_flags(struct aa_dfa *dfa, unsigned int state, in match_mnt_flags()
214 unsigned int state) in compute_mnt_perms()
245 unsigned int state; in do_match_mnt() local
588 unsigned int state; in profile_umount() local
648 unsigned int state; in build_pivotroot() local
|
| D | file.c | 215 struct aa_perms aa_compute_fperms(struct aa_dfa *dfa, unsigned int state, in aa_compute_fperms()
261 unsigned int state; in aa_str_perms() local
367 unsigned int state; in profile_path_link() local
|
| D | lib.c | 325 void aa_compute_perms(struct aa_dfa *dfa, unsigned int state, in aa_compute_perms()
385 unsigned int state; in aa_profile_match_label() local
|
| D | ipc.c | 192 unsigned int state; in profile_signal_perm() local
|
| D | net.c | 112 unsigned int state; in aa_profile_af_perm() local
|
| D | label.c | 1271 unsigned int state) in match_component()
1303 unsigned int state, bool subns, u32 request, in label_compound_match()
1367 unsigned int state = 0; in label_components_match() local
1419 unsigned int state, bool subns, u32 request, in aa_label_match()
|
| D | lsm.c | 1755 const struct nf_hook_state *state) in apparmor_ip_postroute()
1778 const struct nf_hook_state *state) in apparmor_ipv4_postroute()
1786 const struct nf_hook_state *state) in apparmor_ipv6_postroute()
|
| /security/smack/ |
| D | smack_netfilter.c | 25 const struct nf_hook_state *state) in smack_ipv6_output()
43 const struct nf_hook_state *state) in smack_ipv4_output()
|
| /security/keys/ |
| D | gc.c | 140 short state = key->state; in key_gc_unused_keys() local
|
| D | proc.c | 161 short state; in proc_keys_show() local
|
| /security/lockdown/ |
| D | lockdown.c | 119 char *state; in lockdown_write() local
|