26 #define IMA_FUNC	0x0001  macro
122 	 .flags = IMA_FUNC | IMA_MASK},
124 	 .flags = IMA_FUNC | IMA_MASK},
127 	 .flags = IMA_FUNC | IMA_MASK | IMA_UID},
128 	{.action = MEASURE, .func = MODULE_CHECK, .flags = IMA_FUNC},
129 	{.action = MEASURE, .func = FIRMWARE_CHECK, .flags = IMA_FUNC},
134 	 .flags = IMA_FUNC | IMA_MASK},
136 	 .flags = IMA_FUNC | IMA_MASK},
139 	 .flags = IMA_FUNC | IMA_INMASK | IMA_EUID},
142 	 .flags = IMA_FUNC | IMA_INMASK | IMA_UID},
143 	{.action = MEASURE, .func = MODULE_CHECK, .flags = IMA_FUNC},
144 	{.action = MEASURE, .func = FIRMWARE_CHECK, .flags = IMA_FUNC},
145 	{.action = MEASURE, .func = POLICY_CHECK, .flags = IMA_FUNC},
165 	.flags = IMA_FUNC | IMA_DIGSIG_REQUIRED},
180 	 .flags = IMA_FUNC | IMA_DIGSIG_REQUIRED},
184 	 .flags = IMA_FUNC | IMA_DIGSIG_REQUIRED},
188 	 .flags = IMA_FUNC | IMA_DIGSIG_REQUIRED},
192 	 .flags = IMA_FUNC | IMA_DIGSIG_REQUIRED},
198 	 .flags = IMA_FUNC | IMA_DIGSIG_REQUIRED},
200 	 .flags = IMA_FUNC | IMA_DIGSIG_REQUIRED},
202 	 .flags = IMA_FUNC | IMA_DIGSIG_REQUIRED},
204 	 .flags = IMA_FUNC | IMA_DIGSIG_REQUIRED},
508 		return (rule->flags & IMA_FUNC) && (rule->func == func) &&  in ima_match_rules()
511 	if ((rule->flags & IMA_FUNC) &&  in ima_match_rules()
584 	if (!(rule->flags & IMA_FUNC))  in get_subaction()
1051 	if (((entry->flags & IMA_FUNC) && entry->func == NONE) ||  in ima_validate_rule()
1052 	    (!(entry->flags & IMA_FUNC) && entry->func != NONE))  in ima_validate_rule()
1068 		if (entry->flags & ~(IMA_FUNC | IMA_MASK | IMA_FSMAGIC |  in ima_validate_rule()
1079 		if (entry->flags & ~(IMA_FUNC | IMA_MASK | IMA_FSMAGIC |  in ima_validate_rule()
1092 		if (entry->flags & ~(IMA_FUNC | IMA_FSMAGIC | IMA_UID |  in ima_validate_rule()
1102 		if (entry->flags & ~(IMA_FUNC | IMA_UID | IMA_PCR |  in ima_validate_rule()
1244 				entry->flags |= IMA_FUNC;  in ima_parse_rule()
1656 	if (entry->flags & IMA_FUNC)  in ima_policy_show()