Lines Matching full:effective

45 			" effective capabilities. Therefore not raising all"  in warn_setuid_and_fcaps_mixed()
52 * cap_capable - Determine whether a task has a particular effective capability
59 * its effective set, returning 0 if it does, -ve if it does not.
193 * @effective: The place to record the effective set
200 int cap_capget(struct task_struct *target, kernel_cap_t *effective, in cap_capget() argument
208 *effective = cred->cap_effective; in cap_capget()
234 * @effective: A pointer to the proposed new effective capabilities set
244 const kernel_cap_t *effective, in cap_capset() argument
266 if (!cap_issubset(*effective, *permitted)) in cap_capset()
269 new->cap_effective = *effective; in cap_capset()
596 bool *effective, in bprm_caps_from_vfs_caps() argument
604 *effective = true; in bprm_caps_from_vfs_caps()
631 return *effective ? ret : 0; in bprm_caps_from_vfs_caps()
732 bool *effective, bool *has_fcap) in get_file_caps() argument
764 rc = bprm_caps_from_vfs_caps(&vcaps, bprm, effective, has_fcap); in get_file_caps()
788 * @effective: Do we have effective root privilege?
794 * updated. If we have become set UID root, the effective bit is set.
797 bool *effective, kuid_t root_uid) in handle_privileged_root() argument
824 * If only the real uid is 0, we do not set the effective bit. in handle_privileged_root()
827 *effective = true; in handle_privileged_root()
865 if ((__cap_grew(effective, ambient, new) && in nonroot_raised_pE()
866 !(__cap_full(effective, new) && in nonroot_raised_pE()
871 !__cap_full(effective, new)) || in nonroot_raised_pE()
898 bool effective = false, has_fcap = false, is_setid; in cap_bprm_creds_from_file() local
905 ret = get_file_caps(bprm, file, &effective, &has_fcap); in cap_bprm_creds_from_file()
911 handle_privileged_root(bprm, has_fcap, &effective, root_uid); in cap_bprm_creds_from_file()
954 if (effective) in cap_bprm_creds_from_file()
976 (effective || in cap_bprm_creds_from_file()
1064 * cap_emulate_setxuid() fixes the effective / permitted capabilities of
1068 * {r,e,s}uid != 0, the permitted and effective capabilities are
1071 * 2) When set*uiding _from_ euid == 0 _to_ euid != 0, the effective
1074 * 3) When set*uiding _from_ euid != 0 _to_ euid == 0, the effective
1085 * effective sets will be retained.