Lines Matching refs:avd
98 struct av_decision *avd,
206 u16 tclass, struct av_decision *avd, in map_decision() argument
215 if (avd->allowed & mapping->perms[i]) in map_decision()
220 avd->allowed = result; in map_decision()
223 if (avd->auditallow & mapping->perms[i]) in map_decision()
225 avd->auditallow = result; in map_decision()
228 if (avd->auditdeny & mapping->perms[i]) in map_decision()
240 avd->auditdeny = result; in map_decision()
536 struct av_decision *avd) in type_attribute_bounds_av() argument
571 masked = ~lo_avd.allowed & avd->allowed; in type_attribute_bounds_av()
577 avd->allowed &= ~masked; in type_attribute_bounds_av()
617 struct av_decision *avd, in context_struct_compute_av() argument
629 avd->allowed = 0; in context_struct_compute_av()
630 avd->auditallow = 0; in context_struct_compute_av()
631 avd->auditdeny = 0xffffffff; in context_struct_compute_av()
662 avd->allowed |= node->datum.u.data; in context_struct_compute_av()
664 avd->auditallow |= node->datum.u.data; in context_struct_compute_av()
666 avd->auditdeny &= node->datum.u.data; in context_struct_compute_av()
673 avd, xperms); in context_struct_compute_av()
684 if ((constraint->permissions & (avd->allowed)) && in context_struct_compute_av()
687 avd->allowed &= ~(constraint->permissions); in context_struct_compute_av()
698 (avd->allowed & policydb->process_trans_perms) && in context_struct_compute_av()
706 avd->allowed &= ~policydb->process_trans_perms; in context_struct_compute_av()
715 tclass, avd); in context_struct_compute_av()
935 static void avd_init(struct selinux_state *state, struct av_decision *avd) in avd_init() argument
937 avd->allowed = 0; in avd_init()
938 avd->auditallow = 0; in avd_init()
939 avd->auditdeny = 0xffffffff; in avd_init()
940 avd->seqno = state->ss->latest_granting; in avd_init()
941 avd->flags = 0; in avd_init()
1096 struct av_decision *avd, in security_compute_av() argument
1105 avd_init(state, avd); in security_compute_av()
1122 avd->flags |= AVD_FLAGS_PERMISSIVE; in security_compute_av()
1137 context_struct_compute_av(policydb, scontext, tcontext, tclass, avd, in security_compute_av()
1139 map_decision(&state->ss->map, orig_tclass, avd, in security_compute_av()
1145 avd->allowed = 0xffffffff; in security_compute_av()
1153 struct av_decision *avd) in security_compute_av_user() argument
1160 avd_init(state, avd); in security_compute_av_user()
1176 avd->flags |= AVD_FLAGS_PERMISSIVE; in security_compute_av_user()
1191 context_struct_compute_av(policydb, scontext, tcontext, tclass, avd, in security_compute_av_user()
1197 avd->allowed = 0xffffffff; in security_compute_av_user()