5  * This file contains AppArmor resource mediation and attachment
16 #include "include/resource.h"
20  * Table of rlimit names: we generate it from resource.h.
29 /* audit callback for resource specific fields */
44  * audit_resource - audit setting resource limit
46  * @resource: rlimit being auditing
52 static int audit_resource(struct aa_profile *profile, unsigned int resource,  in audit_resource()  argument
58 	aad(&sa)->rlim.rlim = resource;  in audit_resource()
68  * aa_map_resouce - map compiled policy resource to internal #
69  * @resource: flattened policy resource number
71  * Returns: resource # for the current architecture.
73  * rlimit resource can vary based on architecture, map the compiled policy
74  * resource # to the internal representation for the architecture.
76 int aa_map_resource(int resource)  in aa_map_resource()  argument
78 	return rlim_map[resource];  in aa_map_resource()
81 static int profile_setrlimit(struct aa_profile *profile, unsigned int resource,  in profile_setrlimit()  argument
86 	if (profile->rlimits.mask & (1 << resource) && new_rlim->rlim_max >  in profile_setrlimit()
87 	    profile->rlimits.limits[resource].rlim_max)  in profile_setrlimit()
89 	return audit_resource(profile, resource, new_rlim->rlim_max, NULL, NULL,  in profile_setrlimit()
96  * @task - task the resource is being set on
97  * @resource - the resource being set
98  * @new_rlim - the new resource limit  (NOT NULL)
102  * Returns: 0 or error code if setting resource failed
105 		      unsigned int resource, struct rlimit *new_rlim)  in aa_task_setrlimit()  argument
115 	/* TODO: extend resource control to handle other (non current)  in aa_task_setrlimit()
117 	 * that the task is setting the resource of a task confined with  in aa_task_setrlimit()
118 	 * the same profile or that the task setting the resource of another  in aa_task_setrlimit()
125 				audit_resource(profile, resource,  in aa_task_setrlimit()
130 				profile_setrlimit(profile, resource, new_rlim));  in aa_task_setrlimit()