Lines Matching full:access

37 	short access;  member
106 walk->access |= ex->access; in dev_exception_add()
134 walk->access &= ~ex->access; in dev_exception_rm()
135 if (!walk->access) { in dev_exception_rm()
238 static void set_access(char *acc, short access) in set_access() argument
242 if (access & DEVCG_ACC_READ) in set_access()
244 if (access & DEVCG_ACC_WRITE) in set_access()
246 if (access & DEVCG_ACC_MKNOD) in set_access()
290 set_access(acc, ex->access); in devcgroup_seq_show()
308 * @access: permission mask (DEVCG_ACC_READ, DEVCG_ACC_WRITE, DEVCG_ACC_MKNOD)
316 u32 major, u32 minor, short access) in match_exception() argument
329 /* provided access cannot have more than the exception rule */ in match_exception()
330 if (access & (~ex->access)) in match_exception()
343 * @access: permission mask (DEVCG_ACC_READ, DEVCG_ACC_WRITE, DEVCG_ACC_MKNOD)
347 * used to make sure no extra access is being granted that is forbidden by
353 u32 major, u32 minor, short access) in match_exception_partial() argument
373 * an exception, all its access bits shouldn't match the in match_exception_partial()
374 * exception's access bits in match_exception_partial()
376 if (!(access & ex->access)) in match_exception_partial()
419 refex->access); in verify_new_ex()
428 * the new exception will add access to more devices and must in verify_new_ex()
434 refex->access); in verify_new_ex()
466 * be checked if removing it will give the child cgroup more access than the
479 /* It's always allowed to remove access to devices */ in parent_allows_removal()
488 ex->major, ex->minor, ex->access); in parent_allows_removal()
550 * methods), and online ones are safe to access outside RCU in propagate_exception()
595 * new access is only allowed if you're in the top-level cgroup, or your
596 * parent cgroup has the access you're asking for.
700 ex.access |= DEVCG_ACC_READ; in devcgroup_update_access()
703 ex.access |= DEVCG_ACC_WRITE; in devcgroup_update_access()
706 ex.access |= DEVCG_ACC_MKNOD; in devcgroup_update_access()
803 * @access: combination of DEVCG_ACC_WRITE, DEVCG_ACC_READ and DEVCG_ACC_MKNOD
808 short access) in devcgroup_legacy_check_permission() argument
818 type, major, minor, access); in devcgroup_legacy_check_permission()
822 minor, access); in devcgroup_legacy_check_permission()
835 int devcgroup_check_permission(short type, u32 major, u32 minor, short access) in devcgroup_check_permission() argument
837 int rc = BPF_CGROUP_RUN_PROG_DEVICE_CGROUP(type, major, minor, access); in devcgroup_check_permission()
843 return devcgroup_legacy_check_permission(type, major, minor, access); in devcgroup_check_permission()