109 	struct aa_profile *profile = labels_profile(aa_current_raw_label());  in audit_iface()  local
121 	return aa_audit(AUDIT_APPARMOR_STATUS, profile, &sa, audit_cb);  in audit_iface()
477 static bool unpack_trans_table(struct aa_ext *e, struct aa_profile *profile)  in unpack_trans_table()  argument
489 		profile->file.trans.table = kcalloc(size, sizeof(char *),  in unpack_trans_table()
491 		if (!profile->file.trans.table)  in unpack_trans_table()
494 		profile->file.trans.size = size;  in unpack_trans_table()
503 			profile->file.trans.table[i] = str;  in unpack_trans_table()
541 	aa_free_domain_entries(&profile->file.trans);  in unpack_trans_table()
546 static bool unpack_xattrs(struct aa_ext *e, struct aa_profile *profile)  in unpack_xattrs()  argument
554 		profile->xattr_count = size;  in unpack_xattrs()
555 		profile->xattrs = kcalloc(size, sizeof(char *), GFP_KERNEL);  in unpack_xattrs()
556 		if (!profile->xattrs)  in unpack_xattrs()
559 			if (!unpack_strdup(e, &profile->xattrs[i], NULL))  in unpack_xattrs()
575 static bool unpack_secmark(struct aa_ext *e, struct aa_profile *profile)  in unpack_secmark()  argument
583 		profile->secmark = kcalloc(size, sizeof(struct aa_secmark),  in unpack_secmark()
585 		if (!profile->secmark)  in unpack_secmark()
588 		profile->secmark_count = size;  in unpack_secmark()
591 			if (!unpack_u8(e, &profile->secmark[i].audit, NULL))  in unpack_secmark()
593 			if (!unpack_u8(e, &profile->secmark[i].deny, NULL))  in unpack_secmark()
595 			if (!unpack_strdup(e, &profile->secmark[i].label, NULL))  in unpack_secmark()
607 	if (profile->secmark) {  in unpack_secmark()
609 			kfree(profile->secmark[i].label);  in unpack_secmark()
610 		kfree(profile->secmark);  in unpack_secmark()
611 		profile->secmark_count = 0;  in unpack_secmark()
612 		profile->secmark = NULL;  in unpack_secmark()
619 static bool unpack_rlimits(struct aa_ext *e, struct aa_profile *profile)  in unpack_rlimits()  argument
629 		profile->rlimits.mask = tmp;  in unpack_rlimits()
639 			profile->rlimits.limits[a].rlim_max = tmp2;  in unpack_rlimits()
676 	struct aa_profile *profile = NULL;  in unpack_profile()  local
707 	profile = aa_alloc_profile(name, NULL, GFP_KERNEL);  in unpack_profile()
708 	if (!profile)  in unpack_profile()
712 	(void) unpack_str(e, &profile->rename, "rename");  in unpack_profile()
715 	(void) unpack_str(e, &profile->attach, "attach");  in unpack_profile()
718 	profile->xmatch = unpack_dfa(e);  in unpack_profile()
719 	if (IS_ERR(profile->xmatch)) {  in unpack_profile()
720 		error = PTR_ERR(profile->xmatch);  in unpack_profile()
721 		profile->xmatch = NULL;  in unpack_profile()
726 	if (profile->xmatch) {  in unpack_profile()
731 		profile->xmatch_len = tmp;  in unpack_profile()
735 	(void) unpack_str(e, &profile->disconnected, "disconnected");  in unpack_profile()
746 		profile->label.flags |= FLAG_HAT;  in unpack_profile()
750 		profile->mode = APPARMOR_COMPLAIN;  in unpack_profile()
752 		profile->mode = APPARMOR_ENFORCE;  in unpack_profile()
754 		profile->mode = APPARMOR_KILL;  in unpack_profile()
756 		profile->mode = APPARMOR_UNCONFINED;  in unpack_profile()
762 		profile->audit = AUDIT_ALL;  in unpack_profile()
768 	if (unpack_u32(e, &profile->path_flags, "path_flags"))  in unpack_profile()
769 		profile->path_flags |= profile->label.flags &  in unpack_profile()
773 		profile->path_flags = PATH_MEDIATE_DELETED;  in unpack_profile()
776 	if (!unpack_u32(e, &(profile->caps.allow.cap[0]), NULL))  in unpack_profile()
778 	if (!unpack_u32(e, &(profile->caps.audit.cap[0]), NULL))  in unpack_profile()
780 	if (!unpack_u32(e, &(profile->caps.quiet.cap[0]), NULL))  in unpack_profile()
788 		if (!unpack_u32(e, &(profile->caps.allow.cap[1]), NULL))  in unpack_profile()
790 		if (!unpack_u32(e, &(profile->caps.audit.cap[1]), NULL))  in unpack_profile()
792 		if (!unpack_u32(e, &(profile->caps.quiet.cap[1]), NULL))  in unpack_profile()
803 		if (!unpack_u32(e, &(profile->caps.extended.cap[0]), NULL))  in unpack_profile()
805 		if (!unpack_u32(e, &(profile->caps.extended.cap[1]), NULL))  in unpack_profile()
811 	if (!unpack_xattrs(e, profile)) {  in unpack_profile()
816 	if (!unpack_rlimits(e, profile)) {  in unpack_profile()
821 	if (!unpack_secmark(e, profile)) {  in unpack_profile()
829 		profile->policy.dfa = unpack_dfa(e);  in unpack_profile()
830 		if (IS_ERR(profile->policy.dfa)) {  in unpack_profile()
831 			error = PTR_ERR(profile->policy.dfa);  in unpack_profile()
832 			profile->policy.dfa = NULL;  in unpack_profile()
834 		} else if (!profile->policy.dfa) {  in unpack_profile()
838 		if (!unpack_u32(e, &profile->policy.start[0], "start"))  in unpack_profile()
840 			profile->policy.start[0] = DFA_START;  in unpack_profile()
843 			profile->policy.start[i] =  in unpack_profile()
844 				aa_dfa_next(profile->policy.dfa,  in unpack_profile()
845 					    profile->policy.start[0],  in unpack_profile()
851 		profile->policy.dfa = aa_get_dfa(nulldfa);  in unpack_profile()
854 	profile->file.dfa = unpack_dfa(e);  in unpack_profile()
855 	if (IS_ERR(profile->file.dfa)) {  in unpack_profile()
856 		error = PTR_ERR(profile->file.dfa);  in unpack_profile()
857 		profile->file.dfa = NULL;  in unpack_profile()
860 	} else if (profile->file.dfa) {  in unpack_profile()
861 		if (!unpack_u32(e, &profile->file.start, "dfa_start"))  in unpack_profile()
863 			profile->file.start = DFA_START;  in unpack_profile()
864 	} else if (profile->policy.dfa &&  in unpack_profile()
865 		   profile->policy.start[AA_CLASS_FILE]) {  in unpack_profile()
866 		profile->file.dfa = aa_get_dfa(profile->policy.dfa);  in unpack_profile()
867 		profile->file.start = profile->policy.start[AA_CLASS_FILE];  in unpack_profile()
869 		profile->file.dfa = aa_get_dfa(nulldfa);  in unpack_profile()
871 	if (!unpack_trans_table(e, profile)) {  in unpack_profile()
878 		profile->data = kzalloc(sizeof(*profile->data), GFP_KERNEL);  in unpack_profile()
879 		if (!profile->data)  in unpack_profile()
889 		if (rhashtable_init(profile->data, &params)) {  in unpack_profile()
910 			rhashtable_insert_fast(profile->data, &data->head,  in unpack_profile()
911 					       profile->data->p);  in unpack_profile()
925 	return profile;  in unpack_profile()
928 	if (profile)  in unpack_profile()
932 	audit_iface(profile, NULL, name, info, e, error);  in unpack_profile()
933 	aa_free_profile(profile);  in unpack_profile()
1020 static int verify_profile(struct aa_profile *profile)  in verify_profile()  argument
1022 	if (profile->file.dfa &&  in verify_profile()
1023 	    !verify_dfa_xindex(profile->file.dfa,  in verify_profile()
1024 			       profile->file.trans.size)) {  in verify_profile()
1025 		audit_iface(profile, NULL, NULL, "Invalid named transition",  in verify_profile()
1167 	struct aa_profile *profile = NULL;  in aa_unpack()  local
1184 		profile = unpack_profile(&e, &ns_name);  in aa_unpack()
1185 		if (IS_ERR(profile)) {  in aa_unpack()
1186 			error = PTR_ERR(profile);  in aa_unpack()
1190 		error = verify_profile(profile);  in aa_unpack()
1195 			error = aa_calc_profile_hash(profile, e.version, start,  in aa_unpack()
1206 		ent->new = profile;  in aa_unpack()
1225 	aa_put_profile(profile);  in aa_unpack()