Lines Matching full:cap
49 audit_log_untrustedstring(ab, capability_names[sa->u.cap]); in audit_cb()
56 * @cap: capability tested
65 int cap, int error) in audit_caps() argument
77 !cap_raised(rules->caps.audit, cap))) in audit_caps()
81 cap_raised(rules->caps.kill, cap)) { in audit_caps()
83 } else if (cap_raised(rules->caps.quiet, cap) && in audit_caps()
92 if (profile == ent->profile && cap_raised(ent->caps, cap)) { in audit_caps()
100 cap_raise(ent->caps, cap); in audit_caps()
108 * profile_capable - test if profile allows use of capability @cap
110 * @cap: capability to test if allowed
116 static int profile_capable(struct aa_profile *profile, int cap, in profile_capable() argument
123 if (cap_raised(rules->caps.allow, cap) && in profile_capable()
124 !cap_raised(rules->caps.denied, cap)) in profile_capable()
132 /* audit the cap request in complain mode but note that it in profile_capable()
138 return audit_caps(ad, profile, cap, error); in profile_capable()
145 * @cap: capability to be tested
153 int cap, unsigned int opts) in aa_capable() argument
160 ad.common.u.cap = cap; in aa_capable()
162 profile_capable(profile, cap, opts, &ad)); in aa_capable()