| /security/selinux/include/ |
| D | security.h | 90 struct selinux_state { struct
113 extern struct selinux_state selinux_state; argument
115 static inline bool selinux_initialized(const struct selinux_state *state) in selinux_initialized()
121 static inline void selinux_mark_initialized(struct selinux_state *state) in selinux_mark_initialized()
128 static inline bool enforcing_enabled(struct selinux_state *state) in enforcing_enabled()
133 static inline void enforcing_set(struct selinux_state *state, bool value) in enforcing_set()
138 static inline bool enforcing_enabled(struct selinux_state *state) in enforcing_enabled()
143 static inline void enforcing_set(struct selinux_state *state, bool value) in enforcing_set()
148 static inline bool checkreqprot_get(const struct selinux_state *state) in checkreqprot_get()
153 static inline void checkreqprot_set(struct selinux_state *state, bool value) in checkreqprot_set()
[all …]
|
| D | ima.h | 17 extern void selinux_ima_measure_state(struct selinux_state *selinux_state);
19 struct selinux_state *selinux_state);
21 static inline void selinux_ima_measure_state(struct selinux_state *selinux_state) in selinux_ima_measure_state() argument
25 struct selinux_state *selinux_state) in selinux_ima_measure_state_locked() argument
|
| D | avc.h | 55 struct selinux_state *state;
100 int slow_avc_audit(struct selinux_state *state,
124 static inline int avc_audit(struct selinux_state *state, in avc_audit()
142 int avc_has_perm_noaudit(struct selinux_state *state,
148 int avc_has_perm(struct selinux_state *state,
153 int avc_has_extended_perms(struct selinux_state *state,
158 u32 avc_policy_seqno(struct selinux_state *state);
|
| D | conditional.h | 19 int security_set_bools(struct selinux_state *state, u32 len, int *values);
21 int security_get_bool_value(struct selinux_state *state, u32 index);
|
| /security/selinux/ |
| D | hooks.c | 107 struct selinux_state selinux_state; variable
274 if (selinux_initialized(&selinux_state) && in __inode_security_revalidate()
426 rc = avc_has_perm(&selinux_state, in may_context_mount_sb_relabel()
432 rc = avc_has_perm(&selinux_state, in may_context_mount_sb_relabel()
444 rc = avc_has_perm(&selinux_state, in may_context_mount_inode_relabel()
450 rc = avc_has_perm(&selinux_state, in may_context_mount_inode_relabel()
534 rc = security_genfs_sid(&selinux_state, sb->s_type->name, "/", in sb_check_xattr_support()
620 int rc = security_context_str_to_sid(&selinux_state, s, in parse_sid()
649 if (!selinux_initialized(&selinux_state)) { in selinux_set_mnt_opts()
757 rc = security_fs_use(&selinux_state, sb); in selinux_set_mnt_opts()
[all …]
|
| D | xfrm.c | 101 rc = security_context_to_sid(&selinux_state, ctx->ctx_str, str_len, in selinux_xfrm_alloc_user()
106 rc = avc_has_perm(&selinux_state, in selinux_xfrm_alloc_user()
143 return avc_has_perm(&selinux_state, in selinux_xfrm_delete()
166 rc = avc_has_perm(&selinux_state, in selinux_xfrm_policy_lookup()
208 return (avc_has_perm(&selinux_state, flic_sid, state_sid, in selinux_xfrm_state_pol_flow_match()
358 rc = security_sid_to_context(&selinux_state, secid, &ctx_str, in selinux_xfrm_state_alloc_acquire()
427 return avc_has_perm(&selinux_state, in selinux_xfrm_sock_rcv_skb()
471 return avc_has_perm(&selinux_state, sk_sid, SECINITSID_UNLABELED, in selinux_xfrm_postroute_last()
|
| D | status.c | 42 struct page *selinux_kernel_status_page(struct selinux_state *state) in selinux_kernel_status_page()
79 void selinux_status_update_setenforce(struct selinux_state *state, in selinux_status_update_setenforce()
105 void selinux_status_update_policyload(struct selinux_state *state, in selinux_status_update_policyload()
|
| D | ima.c | 23 static char *selinux_ima_collect_state(struct selinux_state *state) in selinux_ima_collect_state()
73 void selinux_ima_measure_state_locked(struct selinux_state *state) in selinux_ima_measure_state_locked()
118 void selinux_ima_measure_state(struct selinux_state *state) in selinux_ima_measure_state()
|
| D | netlabel.c | 48 rc = security_netlbl_secattr_to_sid(&selinux_state, secattr, sid); in selinux_netlbl_sidlookup_cached()
79 rc = security_netlbl_sid_to_secattr(&selinux_state, sksec->sid, in selinux_netlbl_sock_genattr()
247 rc = security_netlbl_sid_to_secattr(&selinux_state, sid, in selinux_netlbl_skbuff_setsid()
285 rc = security_netlbl_sid_to_secattr(&selinux_state, in selinux_netlbl_sctp_assoc_request()
333 rc = security_netlbl_sid_to_secattr(&selinux_state, req->secid, in selinux_netlbl_inet_conn_request()
463 rc = avc_has_perm(&selinux_state, in selinux_netlbl_sock_rcv_skb()
|
| D | selinuxfs.c | 80 struct selinux_state *state;
93 fsi->state = &selinux_state; in selinux_fs_info_create()
143 struct selinux_state *state = fsi->state; in sel_write_enforce()
167 length = avc_has_perm(&selinux_state, in sel_write_enforce()
208 struct selinux_state *state = fsi->state; in sel_read_handle_unknown()
398 struct selinux_state *state = fsi->state; in sel_open_policy()
406 rc = avc_has_perm(&selinux_state, in sel_open_policy()
468 ret = avc_has_perm(&selinux_state, in sel_read_policy()
624 length = avc_has_perm(&selinux_state, in sel_write_load()
679 struct selinux_state *state = fsi->state; in sel_write_context()
[all …]
|
| D | avc.c | 420 static inline int avc_xperms_audit(struct selinux_state *state, in avc_xperms_audit()
775 noinline int slow_avc_audit(struct selinux_state *state, in slow_avc_audit()
1000 struct avc_node *avc_compute_av(struct selinux_state *state, in avc_compute_av()
1012 static noinline int avc_denied(struct selinux_state *state, in avc_denied()
1037 int avc_has_extended_perms(struct selinux_state *state, in avc_has_extended_perms()
1134 inline int avc_has_perm_noaudit(struct selinux_state *state, in avc_has_perm_noaudit()
1181 int avc_has_perm(struct selinux_state *state, u32 ssid, u32 tsid, u16 tclass, in avc_has_perm()
1197 u32 avc_policy_seqno(struct selinux_state *state) in avc_policy_seqno()
1216 avc_flush(selinux_state.avc); in avc_disable()
|
| D | netnode.c | 206 ret = security_node_sid(&selinux_state, PF_INET, in sel_netnode_sid_slow()
212 ret = security_node_sid(&selinux_state, PF_INET6, in sel_netnode_sid_slow()
|
| D | ibpkey.c | 144 ret = security_ib_pkey_sid(&selinux_state, subnet_prefix, pkey_num, in sel_ib_pkey_sid_slow()
|
| D | netport.c | 151 ret = security_port_sid(&selinux_state, protocol, pnum, sid); in sel_netport_sid_slow()
|
| D | netif.c | 156 ret = security_netif_sid(&selinux_state, dev->name, sid); in sel_netif_sid_slow()
|
| /security/selinux/ss/ |
| D | services.c | 74 struct selinux_state *state;
246 int security_mls_enabled(struct selinux_state *state) in security_mls_enabled()
726 static int security_validtrans_handle_fail(struct selinux_state *state, in security_validtrans_handle_fail()
758 static int security_compute_validatetrans(struct selinux_state *state, in security_compute_validatetrans()
842 int security_validate_transition_user(struct selinux_state *state, in security_validate_transition_user()
850 int security_validate_transition(struct selinux_state *state, in security_validate_transition()
868 int security_bounded_transition(struct selinux_state *state, in security_bounded_transition()
1017 void security_compute_xperms_decision(struct selinux_state *state, in security_compute_xperms_decision()
1114 void security_compute_av(struct selinux_state *state, in security_compute_av()
1173 void security_compute_av_user(struct selinux_state *state, in security_compute_av_user()
[all …]
|