Lines Matching refs:profile
112 struct aa_profile *profile = labels_profile(aa_current_raw_label()); in audit_iface() local
124 return aa_audit(AUDIT_APPARMOR_STATUS, profile, &sa, audit_cb); in audit_iface()
434 static bool unpack_trans_table(struct aa_ext *e, struct aa_profile *profile) in unpack_trans_table() argument
446 profile->file.trans.table = kcalloc(size, sizeof(char *), in unpack_trans_table()
448 if (!profile->file.trans.table) in unpack_trans_table()
451 profile->file.trans.size = size; in unpack_trans_table()
460 profile->file.trans.table[i] = str; in unpack_trans_table()
498 aa_free_domain_entries(&profile->file.trans); in unpack_trans_table()
503 static bool unpack_xattrs(struct aa_ext *e, struct aa_profile *profile) in unpack_xattrs() argument
511 profile->xattr_count = size; in unpack_xattrs()
512 profile->xattrs = kcalloc(size, sizeof(char *), GFP_KERNEL); in unpack_xattrs()
513 if (!profile->xattrs) in unpack_xattrs()
516 if (!unpack_strdup(e, &profile->xattrs[i], NULL)) in unpack_xattrs()
532 static bool unpack_rlimits(struct aa_ext *e, struct aa_profile *profile) in unpack_rlimits() argument
542 profile->rlimits.mask = tmp; in unpack_rlimits()
552 profile->rlimits.limits[a].rlim_max = tmp2; in unpack_rlimits()
589 struct aa_profile *profile = NULL; in unpack_profile() local
620 profile = aa_alloc_profile(name, NULL, GFP_KERNEL); in unpack_profile()
621 if (!profile) in unpack_profile()
625 (void) unpack_str(e, &profile->rename, "rename"); in unpack_profile()
628 (void) unpack_str(e, &profile->attach, "attach"); in unpack_profile()
631 profile->xmatch = unpack_dfa(e); in unpack_profile()
632 if (IS_ERR(profile->xmatch)) { in unpack_profile()
633 error = PTR_ERR(profile->xmatch); in unpack_profile()
634 profile->xmatch = NULL; in unpack_profile()
639 if (profile->xmatch) { in unpack_profile()
644 profile->xmatch_len = tmp; in unpack_profile()
648 (void) unpack_str(e, &profile->disconnected, "disconnected"); in unpack_profile()
659 profile->label.flags |= FLAG_HAT; in unpack_profile()
663 profile->mode = APPARMOR_COMPLAIN; in unpack_profile()
665 profile->mode = APPARMOR_KILL; in unpack_profile()
667 profile->mode = APPARMOR_UNCONFINED; in unpack_profile()
671 profile->audit = AUDIT_ALL; in unpack_profile()
677 if (unpack_u32(e, &profile->path_flags, "path_flags")) in unpack_profile()
678 profile->path_flags |= profile->label.flags & in unpack_profile()
682 profile->path_flags = PATH_MEDIATE_DELETED; in unpack_profile()
685 if (!unpack_u32(e, &(profile->caps.allow.cap[0]), NULL)) in unpack_profile()
687 if (!unpack_u32(e, &(profile->caps.audit.cap[0]), NULL)) in unpack_profile()
689 if (!unpack_u32(e, &(profile->caps.quiet.cap[0]), NULL)) in unpack_profile()
697 if (!unpack_u32(e, &(profile->caps.allow.cap[1]), NULL)) in unpack_profile()
699 if (!unpack_u32(e, &(profile->caps.audit.cap[1]), NULL)) in unpack_profile()
701 if (!unpack_u32(e, &(profile->caps.quiet.cap[1]), NULL)) in unpack_profile()
712 if (!unpack_u32(e, &(profile->caps.extended.cap[0]), NULL)) in unpack_profile()
714 if (!unpack_u32(e, &(profile->caps.extended.cap[1]), NULL)) in unpack_profile()
720 if (!unpack_xattrs(e, profile)) { in unpack_profile()
725 if (!unpack_rlimits(e, profile)) { in unpack_profile()
733 profile->policy.dfa = unpack_dfa(e); in unpack_profile()
734 if (IS_ERR(profile->policy.dfa)) { in unpack_profile()
735 error = PTR_ERR(profile->policy.dfa); in unpack_profile()
736 profile->policy.dfa = NULL; in unpack_profile()
738 } else if (!profile->policy.dfa) { in unpack_profile()
742 if (!unpack_u32(e, &profile->policy.start[0], "start")) in unpack_profile()
744 profile->policy.start[0] = DFA_START; in unpack_profile()
747 profile->policy.start[i] = in unpack_profile()
748 aa_dfa_next(profile->policy.dfa, in unpack_profile()
749 profile->policy.start[0], in unpack_profile()
755 profile->policy.dfa = aa_get_dfa(nulldfa); in unpack_profile()
758 profile->file.dfa = unpack_dfa(e); in unpack_profile()
759 if (IS_ERR(profile->file.dfa)) { in unpack_profile()
760 error = PTR_ERR(profile->file.dfa); in unpack_profile()
761 profile->file.dfa = NULL; in unpack_profile()
764 } else if (profile->file.dfa) { in unpack_profile()
765 if (!unpack_u32(e, &profile->file.start, "dfa_start")) in unpack_profile()
767 profile->file.start = DFA_START; in unpack_profile()
768 } else if (profile->policy.dfa && in unpack_profile()
769 profile->policy.start[AA_CLASS_FILE]) { in unpack_profile()
770 profile->file.dfa = aa_get_dfa(profile->policy.dfa); in unpack_profile()
771 profile->file.start = profile->policy.start[AA_CLASS_FILE]; in unpack_profile()
773 profile->file.dfa = aa_get_dfa(nulldfa); in unpack_profile()
775 if (!unpack_trans_table(e, profile)) { in unpack_profile()
782 profile->data = kzalloc(sizeof(*profile->data), GFP_KERNEL); in unpack_profile()
783 if (!profile->data) in unpack_profile()
793 if (rhashtable_init(profile->data, ¶ms)) { in unpack_profile()
814 rhashtable_insert_fast(profile->data, &data->head, in unpack_profile()
815 profile->data->p); in unpack_profile()
829 return profile; in unpack_profile()
832 if (profile) in unpack_profile()
836 audit_iface(profile, NULL, name, info, e, error); in unpack_profile()
837 aa_free_profile(profile); in unpack_profile()
921 static int verify_profile(struct aa_profile *profile) in verify_profile() argument
923 if (profile->file.dfa && in verify_profile()
924 !verify_dfa_xindex(profile->file.dfa, in verify_profile()
925 profile->file.trans.size)) { in verify_profile()
926 audit_iface(profile, NULL, NULL, "Invalid named transition", in verify_profile()
969 struct aa_profile *profile = NULL; in aa_unpack() local
986 profile = unpack_profile(&e, &ns_name); in aa_unpack()
987 if (IS_ERR(profile)) { in aa_unpack()
988 error = PTR_ERR(profile); in aa_unpack()
992 error = verify_profile(profile); in aa_unpack()
997 error = aa_calc_profile_hash(profile, e.version, start, in aa_unpack()
1008 ent->new = profile; in aa_unpack()
1024 aa_put_profile(profile); in aa_unpack()