1579 	struct common_audit_data ad;  in cred_has_capability()  local
1586 	ad.type = LSM_AUDIT_DATA_CAP;  in cred_has_capability()
1587 	ad.u.cap = cap;  in cred_has_capability()
1606 				    sid, sid, sclass, av, &avd, rc, &ad);  in cred_has_capability()
1644 	struct common_audit_data ad;  in dentry_has_perm()  local
1646 	ad.type = LSM_AUDIT_DATA_DENTRY;  in dentry_has_perm()
1647 	ad.u.dentry = dentry;  in dentry_has_perm()
1649 	return inode_has_perm(cred, inode, av, &ad);  in dentry_has_perm()
1660 	struct common_audit_data ad;  in path_has_perm()  local
1662 	ad.type = LSM_AUDIT_DATA_PATH;  in path_has_perm()
1663 	ad.u.path = *path;  in path_has_perm()
1665 	return inode_has_perm(cred, inode, av, &ad);  in path_has_perm()
1673 	struct common_audit_data ad;  in file_path_has_perm()  local
1675 	ad.type = LSM_AUDIT_DATA_FILE;  in file_path_has_perm()
1676 	ad.u.file = file;  in file_path_has_perm()
1677 	return inode_has_perm(cred, file_inode(file), av, &ad);  in file_path_has_perm()
1698 	struct common_audit_data ad;  in file_has_perm()  local
1702 	ad.type = LSM_AUDIT_DATA_FILE;  in file_has_perm()
1703 	ad.u.file = file;  in file_has_perm()
1710 				  &ad);  in file_has_perm()
1724 		rc = inode_has_perm(cred, inode, av, &ad);  in file_has_perm()
1767 	struct common_audit_data ad;  in may_create()  local
1775 	ad.type = LSM_AUDIT_DATA_DENTRY;  in may_create()
1776 	ad.u.dentry = dentry;  in may_create()
1781 			  &ad);  in may_create()
1791 			  sid, newsid, tclass, FILE__CREATE, &ad);  in may_create()
1798 			    FILESYSTEM__ASSOCIATE, &ad);  in may_create()
1812 	struct common_audit_data ad;  in may_link()  local
1820 	ad.type = LSM_AUDIT_DATA_DENTRY;  in may_link()
1821 	ad.u.dentry = dentry;  in may_link()
1826 			  sid, dsec->sid, SECCLASS_DIR, av, &ad);  in may_link()
1847 			  sid, isec->sid, isec->sclass, av, &ad);  in may_link()
1857 	struct common_audit_data ad;  in may_rename()  local
1868 	ad.type = LSM_AUDIT_DATA_DENTRY;  in may_rename()
1870 	ad.u.dentry = old_dentry;  in may_rename()
1873 			  DIR__REMOVE_NAME | DIR__SEARCH, &ad);  in may_rename()
1878 			  old_isec->sclass, FILE__RENAME, &ad);  in may_rename()
1884 				  old_isec->sclass, DIR__REPARENT, &ad);  in may_rename()
1889 	ad.u.dentry = new_dentry;  in may_rename()
1894 			  sid, new_dsec->sid, SECCLASS_DIR, av, &ad);  in may_rename()
1903 				  (new_is_dir ? DIR__RMDIR : FILE__UNLINK), &ad);  in may_rename()
1915 			       struct common_audit_data *ad)  in superblock_has_perm()  argument
1922 			    sid, sbsec->sid, SECCLASS_FILESYSTEM, perms, ad);  in superblock_has_perm()
2038 	struct common_audit_data ad;  in selinux_binder_transfer_file()  local
2041 	ad.type = LSM_AUDIT_DATA_PATH;  in selinux_binder_transfer_file()
2042 	ad.u.path = file->f_path;  in selinux_binder_transfer_file()
2049 				  &ad);  in selinux_binder_transfer_file()
2066 			    &ad);  in selinux_binder_transfer_file()
2284 	struct common_audit_data ad;  in selinux_bprm_creds_for_exec()  local
2330 	ad.type = LSM_AUDIT_DATA_FILE;  in selinux_bprm_creds_for_exec()
2331 	ad.u.file = bprm->file;  in selinux_bprm_creds_for_exec()
2336 				  SECCLASS_FILE, FILE__EXECUTE_NO_TRANS, &ad);  in selinux_bprm_creds_for_exec()
2343 				  SECCLASS_PROCESS, PROCESS__TRANSITION, &ad);  in selinux_bprm_creds_for_exec()
2349 				  SECCLASS_FILE, FILE__ENTRYPOINT, &ad);  in selinux_bprm_creds_for_exec()
2721 	struct common_audit_data ad;  in selinux_sb_kern_mount()  local
2723 	ad.type = LSM_AUDIT_DATA_DENTRY;  in selinux_sb_kern_mount()
2724 	ad.u.dentry = sb->s_root;  in selinux_sb_kern_mount()
2725 	return superblock_has_perm(cred, sb, FILESYSTEM__MOUNT, &ad);  in selinux_sb_kern_mount()
2731 	struct common_audit_data ad;  in selinux_sb_statfs()  local
2733 	ad.type = LSM_AUDIT_DATA_DENTRY;  in selinux_sb_statfs()
2734 	ad.u.dentry = dentry->d_sb->s_root;  in selinux_sb_statfs()
2735 	return superblock_has_perm(cred, dentry->d_sb, FILESYSTEM__GETATTR, &ad);  in selinux_sb_statfs()
2922 	struct common_audit_data ad;  in selinux_inode_init_security_anon()  local
2962 	ad.type = LSM_AUDIT_DATA_ANONINODE;  in selinux_inode_init_security_anon()
2963 	ad.u.anonclass = name ? (const char *)name->name : "?";  in selinux_inode_init_security_anon()
2970 			    &ad);  in selinux_inode_init_security_anon()
3025 	struct common_audit_data ad;  in selinux_inode_follow_link()  local
3031 	ad.type = LSM_AUDIT_DATA_DENTRY;  in selinux_inode_follow_link()
3032 	ad.u.dentry = dentry;  in selinux_inode_follow_link()
3039 				  sid, isec->sid, isec->sclass, FILE__READ, &ad);  in selinux_inode_follow_link()
3046 	struct common_audit_data ad;  in audit_inode_permission()  local
3049 	ad.type = LSM_AUDIT_DATA_INODE;  in audit_inode_permission()
3050 	ad.u.inode = inode;  in audit_inode_permission()
3054 			    audited, denied, result, &ad);  in audit_inode_permission()
3155 	struct common_audit_data ad;  in selinux_inode_setxattr()  local
3179 	ad.type = LSM_AUDIT_DATA_DENTRY;  in selinux_inode_setxattr()
3180 	ad.u.dentry = dentry;  in selinux_inode_setxattr()
3185 			  FILE__RELABELFROM, &ad);  in selinux_inode_setxattr()
3226 			  FILE__RELABELTO, &ad);  in selinux_inode_setxattr()
3240 			    &ad);  in selinux_inode_setxattr()
3324 	struct common_audit_data ad;  in selinux_path_notify()  local
3326 	ad.type = LSM_AUDIT_DATA_PATH;  in selinux_path_notify()
3327 	ad.u.path = *path;  in selinux_path_notify()
3340 						FILESYSTEM__WATCH, &ad);  in selinux_path_notify()
3611 	struct common_audit_data ad;  in ioctl_has_perm()  local
3621 	ad.type = LSM_AUDIT_DATA_IOCTL_OP;  in ioctl_has_perm()
3622 	ad.u.op = &ioctl;  in ioctl_has_perm()
3623 	ad.u.op->cmd = cmd;  in ioctl_has_perm()
3624 	ad.u.op->path = file->f_path;  in ioctl_has_perm()
3631 				&ad);  in ioctl_has_perm()
3642 				    requested, driver, xperm, &ad);  in ioctl_has_perm()
3752 	struct common_audit_data ad;  in selinux_mmap_file()  local
3756 		ad.type = LSM_AUDIT_DATA_FILE;  in selinux_mmap_file()
3757 		ad.u.file = file;  in selinux_mmap_file()
3759 				    FILE__MAP, &ad);  in selinux_mmap_file()
4013 	struct common_audit_data ad;  in selinux_kernel_module_request()  local
4015 	ad.type = LSM_AUDIT_DATA_KMOD;  in selinux_kernel_module_request()
4016 	ad.u.kmod_name = kmod_name;  in selinux_kernel_module_request()
4020 			    SYSTEM__MODULE_REQUEST, &ad);  in selinux_kernel_module_request()
4025 	struct common_audit_data ad;  in selinux_kernel_module_from_file()  local
4039 	ad.type = LSM_AUDIT_DATA_FILE;  in selinux_kernel_module_from_file()
4040 	ad.u.file = file;  in selinux_kernel_module_from_file()
4045 				  sid, fsec->sid, SECCLASS_FD, FD__USE, &ad);  in selinux_kernel_module_from_file()
4053 				SYSTEM__MODULE_LOAD, &ad);  in selinux_kernel_module_from_file()
4235 			struct common_audit_data *ad, u8 *proto)  in selinux_parse_skb_ipv4()  argument
4249 	ad->u.net->v4info.saddr = ih->saddr;  in selinux_parse_skb_ipv4()
4250 	ad->u.net->v4info.daddr = ih->daddr;  in selinux_parse_skb_ipv4()
4268 		ad->u.net->sport = th->source;  in selinux_parse_skb_ipv4()
4269 		ad->u.net->dport = th->dest;  in selinux_parse_skb_ipv4()
4284 		ad->u.net->sport = uh->source;  in selinux_parse_skb_ipv4()
4285 		ad->u.net->dport = uh->dest;  in selinux_parse_skb_ipv4()
4300 		ad->u.net->sport = dh->dccph_sport;  in selinux_parse_skb_ipv4()
4301 		ad->u.net->dport = dh->dccph_dport;  in selinux_parse_skb_ipv4()
4317 		ad->u.net->sport = sh->source;  in selinux_parse_skb_ipv4()
4318 		ad->u.net->dport = sh->dest;  in selinux_parse_skb_ipv4()
4333 			struct common_audit_data *ad, u8 *proto)  in selinux_parse_skb_ipv6()  argument
4345 	ad->u.net->v6info.saddr = ip6->saddr;  in selinux_parse_skb_ipv6()
4346 	ad->u.net->v6info.daddr = ip6->daddr;  in selinux_parse_skb_ipv6()
4366 		ad->u.net->sport = th->source;  in selinux_parse_skb_ipv6()
4367 		ad->u.net->dport = th->dest;  in selinux_parse_skb_ipv6()
4378 		ad->u.net->sport = uh->source;  in selinux_parse_skb_ipv6()
4379 		ad->u.net->dport = uh->dest;  in selinux_parse_skb_ipv6()
4390 		ad->u.net->sport = dh->dccph_sport;  in selinux_parse_skb_ipv6()
4391 		ad->u.net->dport = dh->dccph_dport;  in selinux_parse_skb_ipv6()
4403 		ad->u.net->sport = sh->source;  in selinux_parse_skb_ipv6()
4404 		ad->u.net->dport = sh->dest;  in selinux_parse_skb_ipv6()
4418 static int selinux_parse_skb(struct sk_buff *skb, struct common_audit_data *ad,  in selinux_parse_skb()  argument
4424 	switch (ad->u.net->family) {  in selinux_parse_skb()
4426 		ret = selinux_parse_skb_ipv4(skb, ad, proto);  in selinux_parse_skb()
4429 		addrp = (char *)(src ? &ad->u.net->v4info.saddr :  in selinux_parse_skb()
4430 				       &ad->u.net->v4info.daddr);  in selinux_parse_skb()
4435 		ret = selinux_parse_skb_ipv6(skb, ad, proto);  in selinux_parse_skb()
4438 		addrp = (char *)(src ? &ad->u.net->v6info.saddr :  in selinux_parse_skb()
4439 				       &ad->u.net->v6info.daddr);  in selinux_parse_skb()
4542 	struct common_audit_data ad;  in sock_has_perm()  local
4548 	ad.type = LSM_AUDIT_DATA_NET;  in sock_has_perm()
4549 	ad.u.net = &net;  in sock_has_perm()
4550 	ad.u.net->sk = sk;  in sock_has_perm()
4554 			    &ad);  in sock_has_perm()
4642 		struct common_audit_data ad;  in selinux_socket_bind()  local
4687 		ad.type = LSM_AUDIT_DATA_NET;  in selinux_socket_bind()
4688 		ad.u.net = &net;  in selinux_socket_bind()
4689 		ad.u.net->sport = htons(snum);  in selinux_socket_bind()
4690 		ad.u.net->family = family_sa;  in selinux_socket_bind()
4706 						   SOCKET__NAME_BIND, &ad);  in selinux_socket_bind()
4739 			ad.u.net->v4info.saddr = addr4->sin_addr.s_addr;  in selinux_socket_bind()
4741 			ad.u.net->v6info.saddr = addr6->sin6_addr;  in selinux_socket_bind()
4745 				   sksec->sclass, node_perm, &ad);  in selinux_socket_bind()
4787 		struct common_audit_data ad;  in selinux_socket_connect_helper()  local
4838 		ad.type = LSM_AUDIT_DATA_NET;  in selinux_socket_connect_helper()
4839 		ad.u.net = &net;  in selinux_socket_connect_helper()
4840 		ad.u.net->dport = htons(snum);  in selinux_socket_connect_helper()
4841 		ad.u.net->family = address->sa_family;  in selinux_socket_connect_helper()
4843 				   sksec->sid, sid, sksec->sclass, perm, &ad);  in selinux_socket_connect_helper()
4947 	struct common_audit_data ad;  in selinux_socket_unix_stream_connect()  local
4951 	ad.type = LSM_AUDIT_DATA_NET;  in selinux_socket_unix_stream_connect()
4952 	ad.u.net = &net;  in selinux_socket_unix_stream_connect()
4953 	ad.u.net->sk = other;  in selinux_socket_unix_stream_connect()
4958 			   UNIX_STREAM_SOCKET__CONNECTTO, &ad);  in selinux_socket_unix_stream_connect()
4980 	struct common_audit_data ad;  in selinux_socket_unix_may_send()  local
4983 	ad.type = LSM_AUDIT_DATA_NET;  in selinux_socket_unix_may_send()
4984 	ad.u.net = &net;  in selinux_socket_unix_may_send()
4985 	ad.u.net->sk = other->sk;  in selinux_socket_unix_may_send()
4989 			    &ad);  in selinux_socket_unix_may_send()
4994 				    struct common_audit_data *ad)  in selinux_inet_sys_rcv_skb()  argument
5005 			   SECCLASS_NETIF, NETIF__INGRESS, ad);  in selinux_inet_sys_rcv_skb()
5014 			    SECCLASS_NODE, NODE__RECVFROM, ad);  in selinux_inet_sys_rcv_skb()
5023 	struct common_audit_data ad;  in selinux_sock_rcv_skb_compat()  local
5027 	ad.type = LSM_AUDIT_DATA_NET;  in selinux_sock_rcv_skb_compat()
5028 	ad.u.net = &net;  in selinux_sock_rcv_skb_compat()
5029 	ad.u.net->netif = skb->skb_iif;  in selinux_sock_rcv_skb_compat()
5030 	ad.u.net->family = family;  in selinux_sock_rcv_skb_compat()
5031 	err = selinux_parse_skb(skb, &ad, &addrp, 1, NULL);  in selinux_sock_rcv_skb_compat()
5038 				   PACKET__RECV, &ad);  in selinux_sock_rcv_skb_compat()
5043 	err = selinux_netlbl_sock_rcv_skb(sksec, skb, family, &ad);  in selinux_sock_rcv_skb_compat()
5046 	err = selinux_xfrm_sock_rcv_skb(sksec->sid, skb, &ad);  in selinux_sock_rcv_skb_compat()
5057 	struct common_audit_data ad;  in selinux_socket_sock_rcv_skb()  local
5082 	ad.type = LSM_AUDIT_DATA_NET;  in selinux_socket_sock_rcv_skb()
5083 	ad.u.net = &net;  in selinux_socket_sock_rcv_skb()
5084 	ad.u.net->netif = skb->skb_iif;  in selinux_socket_sock_rcv_skb()
5085 	ad.u.net->family = family;  in selinux_socket_sock_rcv_skb()
5086 	err = selinux_parse_skb(skb, &ad, &addrp, 1, NULL);  in selinux_socket_sock_rcv_skb()
5097 					       addrp, family, peer_sid, &ad);  in selinux_socket_sock_rcv_skb()
5104 				   PEER__RECV, &ad);  in selinux_socket_sock_rcv_skb()
5114 				   PACKET__RECV, &ad);  in selinux_socket_sock_rcv_skb()
5257 	struct common_audit_data ad;  in selinux_sctp_process_new_assoc()  local
5294 		ad.type = LSM_AUDIT_DATA_NET;  in selinux_sctp_process_new_assoc()
5295 		ad.u.net = &net;  in selinux_sctp_process_new_assoc()
5296 		ad.u.net->sk = asoc->base.sk;  in selinux_sctp_process_new_assoc()
5300 				   &ad);  in selinux_sctp_process_new_assoc()
5631 	struct common_audit_data ad;  in selinux_ip_forward()  local
5648 	ad.type = LSM_AUDIT_DATA_NET;  in selinux_ip_forward()
5649 	ad.u.net = &net;  in selinux_ip_forward()
5650 	ad.u.net->netif = ifindex;  in selinux_ip_forward()
5651 	ad.u.net->family = family;  in selinux_ip_forward()
5652 	if (selinux_parse_skb(skb, &ad, &addrp, 1, NULL) != 0)  in selinux_ip_forward()
5659 					       addrp, family, peer_sid, &ad);  in selinux_ip_forward()
5669 				 SECCLASS_PACKET, PACKET__FORWARD_IN, &ad))  in selinux_ip_forward()
5731 	struct common_audit_data ad;  in selinux_ip_postroute_compat()  local
5740 	ad.type = LSM_AUDIT_DATA_NET;  in selinux_ip_postroute_compat()
5741 	ad.u.net = &net;  in selinux_ip_postroute_compat()
5742 	ad.u.net->netif = state->out->ifindex;  in selinux_ip_postroute_compat()
5743 	ad.u.net->family = state->pf;  in selinux_ip_postroute_compat()
5744 	if (selinux_parse_skb(skb, &ad, NULL, 0, &proto))  in selinux_ip_postroute_compat()
5750 				 SECCLASS_PACKET, PACKET__SEND, &ad))  in selinux_ip_postroute_compat()
5753 	if (selinux_xfrm_postroute_last(sksec->sid, skb, &ad, proto))  in selinux_ip_postroute_compat()
5768 	struct common_audit_data ad;  in selinux_ip_postroute()  local
5866 	ad.type = LSM_AUDIT_DATA_NET;  in selinux_ip_postroute()
5867 	ad.u.net = &net;  in selinux_ip_postroute()
5868 	ad.u.net->netif = ifindex;  in selinux_ip_postroute()
5869 	ad.u.net->family = family;  in selinux_ip_postroute()
5870 	if (selinux_parse_skb(skb, &ad, &addrp, 0, NULL))  in selinux_ip_postroute()
5876 				 SECCLASS_PACKET, secmark_perm, &ad))  in selinux_ip_postroute()
5887 				 SECCLASS_NETIF, NETIF__EGRESS, &ad))  in selinux_ip_postroute()
5894 				 SECCLASS_NODE, NODE__SENDTO, &ad))  in selinux_ip_postroute()
5970 	struct common_audit_data ad;  in ipc_has_perm()  local
5975 	ad.type = LSM_AUDIT_DATA_IPC;  in ipc_has_perm()
5976 	ad.u.ipc_id = ipc_perms->key;  in ipc_has_perm()
5979 			    sid, isec->sid, isec->sclass, perms, &ad);  in ipc_has_perm()
5996 	struct common_audit_data ad;  in selinux_msg_queue_alloc_security()  local
6002 	ad.type = LSM_AUDIT_DATA_IPC;  in selinux_msg_queue_alloc_security()
6003 	ad.u.ipc_id = msq->key;  in selinux_msg_queue_alloc_security()
6007 			    MSGQ__CREATE, &ad);  in selinux_msg_queue_alloc_security()
6013 	struct common_audit_data ad;  in selinux_msg_queue_associate()  local
6018 	ad.type = LSM_AUDIT_DATA_IPC;  in selinux_msg_queue_associate()
6019 	ad.u.ipc_id = msq->key;  in selinux_msg_queue_associate()
6023 			    MSGQ__ASSOCIATE, &ad);  in selinux_msg_queue_associate()
6061 	struct common_audit_data ad;  in selinux_msg_queue_msgsnd()  local
6082 	ad.type = LSM_AUDIT_DATA_IPC;  in selinux_msg_queue_msgsnd()
6083 	ad.u.ipc_id = msq->key;  in selinux_msg_queue_msgsnd()
6088 			  MSGQ__WRITE, &ad);  in selinux_msg_queue_msgsnd()
6093 				  MSG__SEND, &ad);  in selinux_msg_queue_msgsnd()
6098 				  MSGQ__ENQUEUE, &ad);  in selinux_msg_queue_msgsnd()
6109 	struct common_audit_data ad;  in selinux_msg_queue_msgrcv()  local
6116 	ad.type = LSM_AUDIT_DATA_IPC;  in selinux_msg_queue_msgrcv()
6117 	ad.u.ipc_id = msq->key;  in selinux_msg_queue_msgrcv()
6121 			  SECCLASS_MSGQ, MSGQ__READ, &ad);  in selinux_msg_queue_msgrcv()
6125 				  SECCLASS_MSG, MSG__RECEIVE, &ad);  in selinux_msg_queue_msgrcv()
6133 	struct common_audit_data ad;  in selinux_shm_alloc_security()  local
6139 	ad.type = LSM_AUDIT_DATA_IPC;  in selinux_shm_alloc_security()
6140 	ad.u.ipc_id = shp->key;  in selinux_shm_alloc_security()
6144 			    SHM__CREATE, &ad);  in selinux_shm_alloc_security()
6150 	struct common_audit_data ad;  in selinux_shm_associate()  local
6155 	ad.type = LSM_AUDIT_DATA_IPC;  in selinux_shm_associate()
6156 	ad.u.ipc_id = shp->key;  in selinux_shm_associate()
6160 			    SHM__ASSOCIATE, &ad);  in selinux_shm_associate()
6216 	struct common_audit_data ad;  in selinux_sem_alloc_security()  local
6222 	ad.type = LSM_AUDIT_DATA_IPC;  in selinux_sem_alloc_security()
6223 	ad.u.ipc_id = sma->key;  in selinux_sem_alloc_security()
6227 			    SEM__CREATE, &ad);  in selinux_sem_alloc_security()
6233 	struct common_audit_data ad;  in selinux_sem_associate()  local
6238 	ad.type = LSM_AUDIT_DATA_IPC;  in selinux_sem_associate()
6239 	ad.u.ipc_id = sma->key;  in selinux_sem_associate()
6243 			    SEM__ASSOCIATE, &ad);  in selinux_sem_associate()
6693 	struct common_audit_data ad;  in selinux_ib_pkey_access()  local
6703 	ad.type = LSM_AUDIT_DATA_IBPKEY;  in selinux_ib_pkey_access()
6706 	ad.u.ibpkey = &ibpkey;  in selinux_ib_pkey_access()
6710 			    INFINIBAND_PKEY__ACCESS, &ad);  in selinux_ib_pkey_access()
6716 	struct common_audit_data ad;  in selinux_ib_endport_manage_subnet()  local
6728 	ad.type = LSM_AUDIT_DATA_IBENDPORT;  in selinux_ib_endport_manage_subnet()
6731 	ad.u.ibendport = &ibendport;  in selinux_ib_endport_manage_subnet()
6735 			    INFINIBAND_ENDPORT__MANAGE_SUBNET, &ad);  in selinux_ib_endport_manage_subnet()
7007 	struct common_audit_data ad;  in selinux_uring_cmd()  local
7009 	ad.type = LSM_AUDIT_DATA_FILE;  in selinux_uring_cmd()
7010 	ad.u.file = file;  in selinux_uring_cmd()
7013 			    SECCLASS_IO_URING, IO_URING__CMD, &ad);  in selinux_uring_cmd()