Lines Matching refs:perms

139 				struct aa_perms *perms)  in label_compound_match()  argument
156 *perms = allperms; in label_compound_match()
168 *perms = aa_compute_fperms(profile->file.dfa, state, &cond); in label_compound_match()
169 aa_apply_modes_to_perms(profile, perms); in label_compound_match()
170 if ((perms->allow & request) != request) in label_compound_match()
176 *perms = nullperms; in label_compound_match()
199 struct aa_perms *perms) in label_components_match() argument
223 aa_perms_accum(perms, &tmp); in label_components_match()
232 aa_perms_accum(perms, &tmp); in label_components_match()
235 if ((perms->allow & request) != request) in label_components_match()
241 *perms = nullperms; in label_components_match()
259 struct aa_perms *perms) in label_match() argument
263 *perms = nullperms; in label_match()
265 request, perms); in label_match()
269 *perms = allperms; in label_match()
271 request, perms); in label_match()
293 struct aa_perms *perms) in change_profile_perms() argument
296 perms->allow = AA_MAY_CHANGE_PROFILE | AA_MAY_ONEXEC; in change_profile_perms()
297 perms->audit = perms->quiet = perms->kill = 0; in change_profile_perms()
302 return label_match(profile, target, stack, start, true, request, perms); in change_profile_perms()
627 struct aa_perms perms = {}; in profile_transition() local
660 state = aa_str_perms(profile->file.dfa, state, name, cond, &perms); in profile_transition()
661 if (perms.allow & MAY_EXEC) { in profile_transition()
663 new = x_to_label(profile, bprm, name, perms.xindex, &target, in profile_transition()
672 perms.allow &= ~MAY_EXEC; in profile_transition()
682 perms.allow &= ~MAY_EXEC; in profile_transition()
713 perms.xindex |= AA_X_UNSAFE; in profile_transition()
722 if (!(perms.xindex & AA_X_UNSAFE)) { in profile_transition()
733 aa_audit_file(profile, &perms, OP_EXEC, MAY_EXEC, name, target, new, in profile_transition()
749 struct aa_perms perms = {}; in profile_onexec() local
781 state = aa_str_perms(profile->file.dfa, state, xname, cond, &perms); in profile_onexec()
782 if (!(perms.allow & AA_MAY_ONEXEC)) { in profile_onexec()
792 state, &perms); in profile_onexec()
794 perms.allow &= ~AA_MAY_ONEXEC; in profile_onexec()
798 if (!(perms.xindex & AA_X_UNSAFE)) { in profile_onexec()
809 return aa_audit_file(profile, &perms, OP_EXEC, AA_MAY_ONEXEC, xname, in profile_onexec()
1172 struct aa_perms perms = {}; in aa_change_hat() local
1266 perms.kill = AA_MAY_CHANGEHAT; in aa_change_hat()
1270 aa_audit_file(profile, &perms, OP_CHANGE_HAT, in aa_change_hat()
1281 u32 request, struct aa_perms *perms) in change_profile_perms_wrapper() argument
1288 profile->file.start, perms); in change_profile_perms_wrapper()
1290 error = aa_audit_file(profile, perms, op, request, name, in change_profile_perms_wrapper()
1315 struct aa_perms perms = {}; in aa_change_profile() local
1399 request, &perms)); in aa_change_profile()
1449 perms.allow = 0; in aa_change_profile()
1465 aa_audit_file(profile, &perms, op, request, auditname, in aa_change_profile()