609 static void profile_query_cb(struct aa_profile *profile, struct aa_perms *perms,  in profile_query_cb()  argument
616 	if (profile_unconfined(profile))  in profile_query_cb()
618 	if (profile->file.dfa && *match_str == AA_CLASS_FILE) {  in profile_query_cb()
619 		dfa = profile->file.dfa;  in profile_query_cb()
620 		state = aa_dfa_match_len(dfa, profile->file.start,  in profile_query_cb()
627 	} else if (profile->policy.dfa) {  in profile_query_cb()
628 		if (!PROFILE_MEDIATES(profile, *match_str))  in profile_query_cb()
630 		dfa = profile->policy.dfa;  in profile_query_cb()
631 		state = aa_dfa_match_len(dfa, profile->policy.start[0],  in profile_query_cb()
636 	aa_apply_modes_to_perms(profile, &tmp);  in profile_query_cb()
666 	struct aa_profile *profile;  in query_data()  local
701 	label_for_each_confined(i, label, profile) {  in query_data()
702 		if (!profile->data)  in query_data()
705 		data = rhashtable_lookup_fast(profile->data, &key,  in query_data()
706 					      profile->data->p);  in query_data()
755 	struct aa_profile *profile;  in query_label()  local
787 		label_for_each_in_ns(i, labels_ns(label), label, profile) {  in query_label()
788 			profile_query_cb(profile, &perms, match_str, match_len);  in query_label()
791 		label_for_each(i, label, profile) {  in query_label()
792 			profile_query_cb(profile, &perms, match_str, match_len);  in query_label()
1069 	struct aa_profile *profile = labels_profile(label);  in seq_profile_name_show()  local
1070 	seq_printf(seq, "%s\n", profile->base.name);  in seq_profile_name_show()
1080 	struct aa_profile *profile = labels_profile(label);  in seq_profile_mode_show()  local
1081 	seq_printf(seq, "%s\n", aa_profile_mode_names[profile->mode]);  in seq_profile_mode_show()
1091 	struct aa_profile *profile = labels_profile(label);  in seq_profile_attach_show()  local
1092 	if (profile->attach)  in seq_profile_attach_show()
1093 		seq_printf(seq, "%s\n", profile->attach);  in seq_profile_attach_show()
1094 	else if (profile->xmatch)  in seq_profile_attach_show()
1097 		seq_printf(seq, "%s\n", profile->base.name);  in seq_profile_attach_show()
1107 	struct aa_profile *profile = labels_profile(label);  in seq_profile_hash_show()  local
1110 	if (profile->hash) {  in seq_profile_hash_show()
1112 			seq_printf(seq, "%.2x", profile->hash[i]);  in seq_profile_hash_show()
1159 	struct aa_profile *profile;  in seq_ns_nsstacked_show()  local
1166 		label_for_each(it, label, profile)  in seq_ns_nsstacked_show()
1167 			if (profile->ns != labels_ns(label)) {  in seq_ns_nsstacked_show()
1416 void __aafs_profile_rmdir(struct aa_profile *profile)  in __aafs_profile_rmdir()  argument
1421 	if (!profile)  in __aafs_profile_rmdir()
1424 	list_for_each_entry(child, &profile->base.profiles, base.list)  in __aafs_profile_rmdir()
1429 		if (!profile->dents[i])  in __aafs_profile_rmdir()
1432 		proxy = d_inode(profile->dents[i])->i_private;  in __aafs_profile_rmdir()
1433 		aafs_remove(profile->dents[i]);  in __aafs_profile_rmdir()
1435 		profile->dents[i] = NULL;  in __aafs_profile_rmdir()
1461 					  struct aa_profile *profile,  in create_profile_file()  argument
1464 	struct aa_proxy *proxy = aa_get_proxy(profile->label.proxy);  in create_profile_file()
1474 static int profile_depth(struct aa_profile *profile)  in profile_depth()  argument
1479 	for (depth = 0; profile; profile = rcu_access_pointer(profile->parent))  in profile_depth()
1523 	struct aa_profile *profile;  in rawdata_get_link_base()  local
1531 	profile = labels_profile(label);  in rawdata_get_link_base()
1532 	depth = profile_depth(profile);  in rawdata_get_link_base()
1533 	target = gen_symlink_name(depth, profile->rawdata->name, name);  in rawdata_get_link_base()
1580 int __aafs_profile_mkdir(struct aa_profile *profile, struct dentry *parent)  in __aafs_profile_mkdir()  argument
1586 	AA_BUG(!profile);  in __aafs_profile_mkdir()
1587 	AA_BUG(!mutex_is_locked(&profiles_ns(profile)->lock));  in __aafs_profile_mkdir()
1591 		p = aa_deref_parent(profile);  in __aafs_profile_mkdir()
1600 	if (!profile->dirname) {  in __aafs_profile_mkdir()
1602 		len = mangle_name(profile->base.name, NULL);  in __aafs_profile_mkdir()
1603 		id_len = snprintf(NULL, 0, ".%ld", profile->ns->uniq_id);  in __aafs_profile_mkdir()
1605 		profile->dirname = kmalloc(len + id_len + 1, GFP_KERNEL);  in __aafs_profile_mkdir()
1606 		if (!profile->dirname) {  in __aafs_profile_mkdir()
1611 		mangle_name(profile->base.name, profile->dirname);  in __aafs_profile_mkdir()
1612 		sprintf(profile->dirname + len, ".%ld", profile->ns->uniq_id++);  in __aafs_profile_mkdir()
1615 	dent = aafs_create_dir(profile->dirname, parent);  in __aafs_profile_mkdir()
1618 	prof_dir(profile) = dir = dent;  in __aafs_profile_mkdir()
1620 	dent = create_profile_file(dir, "name", profile,  in __aafs_profile_mkdir()
1624 	profile->dents[AAFS_PROF_NAME] = dent;  in __aafs_profile_mkdir()
1626 	dent = create_profile_file(dir, "mode", profile,  in __aafs_profile_mkdir()
1630 	profile->dents[AAFS_PROF_MODE] = dent;  in __aafs_profile_mkdir()
1632 	dent = create_profile_file(dir, "attach", profile,  in __aafs_profile_mkdir()
1636 	profile->dents[AAFS_PROF_ATTACH] = dent;  in __aafs_profile_mkdir()
1638 	if (profile->hash) {  in __aafs_profile_mkdir()
1639 		dent = create_profile_file(dir, "sha1", profile,  in __aafs_profile_mkdir()
1643 		profile->dents[AAFS_PROF_HASH] = dent;  in __aafs_profile_mkdir()
1646 	if (profile->rawdata) {  in __aafs_profile_mkdir()
1648 					   profile->label.proxy,  in __aafs_profile_mkdir()
1652 		aa_get_proxy(profile->label.proxy);  in __aafs_profile_mkdir()
1653 		profile->dents[AAFS_PROF_RAW_HASH] = dent;  in __aafs_profile_mkdir()
1656 					   profile->label.proxy,  in __aafs_profile_mkdir()
1660 		aa_get_proxy(profile->label.proxy);  in __aafs_profile_mkdir()
1661 		profile->dents[AAFS_PROF_RAW_ABI] = dent;  in __aafs_profile_mkdir()
1664 					   profile->label.proxy,  in __aafs_profile_mkdir()
1668 		aa_get_proxy(profile->label.proxy);  in __aafs_profile_mkdir()
1669 		profile->dents[AAFS_PROF_RAW_DATA] = dent;  in __aafs_profile_mkdir()
1672 	list_for_each_entry(child, &profile->base.profiles, base.list) {  in __aafs_profile_mkdir()
1673 		error = __aafs_profile_mkdir(child, prof_child_dir(profile));  in __aafs_profile_mkdir()
1684 	__aafs_profile_rmdir(profile);  in __aafs_profile_mkdir()
2079 				       struct aa_profile *profile)  in next_profile()  argument
2081 	struct aa_profile *next = __next_profile(profile);  in next_profile()
2086 	return __first_profile(root, __next_ns(root, profile->ns));  in next_profile()
2100 	struct aa_profile *profile = NULL;  in p_start()  local
2107 	profile = __first_profile(root, root);  in p_start()
2110 	for (; profile && l > 0; l--)  in p_start()
2111 		profile = next_profile(root, profile);  in p_start()
2113 	return profile;  in p_start()
2128 	struct aa_profile *profile = p;  in p_next()  local
2132 	return next_profile(ns, profile);  in p_next()
2144 	struct aa_profile *profile = p;  in p_stop()  local
2147 	if (profile) {  in p_stop()
2148 		for (ns = profile->ns; ns && ns != root; ns = ns->parent)  in p_stop()
2164 	struct aa_profile *profile = (struct aa_profile *)p;  in seq_show_profile()  local
2167 	aa_label_seq_xprint(f, root, &profile->label,  in seq_show_profile()