102  * mangle_name - mangle a profile name to std profile layout form
103  * @name: profile name to mangle  (NOT NULL)
611 static void profile_query_cb(struct aa_profile *profile, struct aa_perms *perms,  in profile_query_cb()  argument
614 	struct aa_ruleset *rules = list_first_entry(&profile->rules,  in profile_query_cb()
619 	if (profile_unconfined(profile))  in profile_query_cb()
639 	aa_apply_modes_to_perms(profile, &tmp);  in profile_query_cb()
669 	struct aa_profile *profile;  in query_data()  local
704 	label_for_each_confined(i, label, profile) {  in query_data()
705 		if (!profile->data)  in query_data()
708 		data = rhashtable_lookup_fast(profile->data, &key,  in query_data()
709 					      profile->data->p);  in query_data()
758 	struct aa_profile *profile;  in query_label()  local
775 	 * profile name and dfa string. profile_name_len is greater  in query_label()
790 		label_for_each_in_ns(i, labels_ns(label), label, profile) {  in query_label()
791 			profile_query_cb(profile, &perms, match_str, match_len);  in query_label()
794 		label_for_each(i, label, profile) {  in query_label()
795 			profile_query_cb(profile, &perms, match_str, match_len);  in query_label()
908 #define QUERY_CMD_PROFILE	"profile\0"
927  * profile query specific format described in the query_label() function
1029  * profile based file operations
1073 	struct aa_profile *profile = labels_profile(label);  in seq_profile_name_show()  local
1074 	seq_printf(seq, "%s\n", profile->base.name);  in seq_profile_name_show()
1084 	struct aa_profile *profile = labels_profile(label);  in seq_profile_mode_show()  local
1085 	seq_printf(seq, "%s\n", aa_profile_mode_names[profile->mode]);  in seq_profile_mode_show()
1095 	struct aa_profile *profile = labels_profile(label);  in seq_profile_attach_show()  local
1096 	if (profile->attach.xmatch_str)  in seq_profile_attach_show()
1097 		seq_printf(seq, "%s\n", profile->attach.xmatch_str);  in seq_profile_attach_show()
1098 	else if (profile->attach.xmatch.dfa)  in seq_profile_attach_show()
1101 		seq_printf(seq, "%s\n", profile->base.name);  in seq_profile_attach_show()
1111 	struct aa_profile *profile = labels_profile(label);  in seq_profile_hash_show()  local
1114 	if (profile->hash) {  in seq_profile_hash_show()
1116 			seq_printf(seq, "%.2x", profile->hash[i]);  in seq_profile_hash_show()
1163 	struct aa_profile *profile;  in seq_ns_nsstacked_show()  local
1170 		label_for_each(it, label, profile)  in seq_ns_nsstacked_show()
1171 			if (profile->ns != labels_ns(label)) {  in seq_ns_nsstacked_show()
1513 /** fns to setup dynamic per profile/namespace files **/
1517  * Requires: @profile->ns->lock held
1519 void __aafs_profile_rmdir(struct aa_profile *profile)  in __aafs_profile_rmdir()  argument
1524 	if (!profile)  in __aafs_profile_rmdir()
1527 	list_for_each_entry(child, &profile->base.profiles, base.list)  in __aafs_profile_rmdir()
1532 		if (!profile->dents[i])  in __aafs_profile_rmdir()
1535 		proxy = d_inode(profile->dents[i])->i_private;  in __aafs_profile_rmdir()
1536 		aafs_remove(profile->dents[i]);  in __aafs_profile_rmdir()
1538 		profile->dents[i] = NULL;  in __aafs_profile_rmdir()
1567 					  struct aa_profile *profile,  in create_profile_file()  argument
1570 	struct aa_proxy *proxy = aa_get_proxy(profile->label.proxy);  in create_profile_file()
1581 static int profile_depth(struct aa_profile *profile)  in profile_depth()  argument
1586 	for (depth = 0; profile; profile = rcu_access_pointer(profile->parent))  in profile_depth()
1630 	struct aa_profile *profile;  in rawdata_get_link_base()  local
1638 	profile = labels_profile(label);  in rawdata_get_link_base()
1639 	depth = profile_depth(profile);  in rawdata_get_link_base()
1640 	target = gen_symlink_name(depth, profile->rawdata->name, name);  in rawdata_get_link_base()
1685  * Requires: @profile->ns->lock held
1687 int __aafs_profile_mkdir(struct aa_profile *profile, struct dentry *parent)  in __aafs_profile_mkdir()  argument
1693 	AA_BUG(!profile);  in __aafs_profile_mkdir()
1694 	AA_BUG(!mutex_is_locked(&profiles_ns(profile)->lock));  in __aafs_profile_mkdir()
1698 		p = aa_deref_parent(profile);  in __aafs_profile_mkdir()
1707 	if (!profile->dirname) {  in __aafs_profile_mkdir()
1709 		len = mangle_name(profile->base.name, NULL);  in __aafs_profile_mkdir()
1710 		id_len = snprintf(NULL, 0, ".%ld", profile->ns->uniq_id);  in __aafs_profile_mkdir()
1712 		profile->dirname = kmalloc(len + id_len + 1, GFP_KERNEL);  in __aafs_profile_mkdir()
1713 		if (!profile->dirname) {  in __aafs_profile_mkdir()
1718 		mangle_name(profile->base.name, profile->dirname);  in __aafs_profile_mkdir()
1719 		sprintf(profile->dirname + len, ".%ld", profile->ns->uniq_id++);  in __aafs_profile_mkdir()
1722 	dent = aafs_create_dir(profile->dirname, parent);  in __aafs_profile_mkdir()
1725 	prof_dir(profile) = dir = dent;  in __aafs_profile_mkdir()
1727 	dent = create_profile_file(dir, "name", profile,  in __aafs_profile_mkdir()
1731 	profile->dents[AAFS_PROF_NAME] = dent;  in __aafs_profile_mkdir()
1733 	dent = create_profile_file(dir, "mode", profile,  in __aafs_profile_mkdir()
1737 	profile->dents[AAFS_PROF_MODE] = dent;  in __aafs_profile_mkdir()
1739 	dent = create_profile_file(dir, "attach", profile,  in __aafs_profile_mkdir()
1743 	profile->dents[AAFS_PROF_ATTACH] = dent;  in __aafs_profile_mkdir()
1745 	if (profile->hash) {  in __aafs_profile_mkdir()
1746 		dent = create_profile_file(dir, "sha1", profile,  in __aafs_profile_mkdir()
1750 		profile->dents[AAFS_PROF_HASH] = dent;  in __aafs_profile_mkdir()
1754 	if (profile->rawdata) {  in __aafs_profile_mkdir()
1757 					   profile->label.proxy, NULL, NULL,  in __aafs_profile_mkdir()
1761 			aa_get_proxy(profile->label.proxy);  in __aafs_profile_mkdir()
1762 			profile->dents[AAFS_PROF_RAW_HASH] = dent;  in __aafs_profile_mkdir()
1765 				   profile->label.proxy, NULL, NULL,  in __aafs_profile_mkdir()
1769 		aa_get_proxy(profile->label.proxy);  in __aafs_profile_mkdir()
1770 		profile->dents[AAFS_PROF_RAW_ABI] = dent;  in __aafs_profile_mkdir()
1773 				   profile->label.proxy, NULL, NULL,  in __aafs_profile_mkdir()
1777 		aa_get_proxy(profile->label.proxy);  in __aafs_profile_mkdir()
1778 		profile->dents[AAFS_PROF_RAW_DATA] = dent;  in __aafs_profile_mkdir()
1782 	list_for_each_entry(child, &profile->base.profiles, base.list) {  in __aafs_profile_mkdir()
1783 		error = __aafs_profile_mkdir(child, prof_child_dir(profile));  in __aafs_profile_mkdir()
1794 	__aafs_profile_rmdir(profile);  in __aafs_profile_mkdir()
2117  * __first_profile - find the first profile in a namespace
2121  * Returns: unrefcounted profile or NULL if no profile
2122  * Requires: profile->ns.lock to be held
2139  * __next_profile - step to the next profile in a profile tree
2140  * @p: current profile in tree (NOT NULL)
2142  * Perform a depth first traversal on the profile tree in a namespace
2144  * Returns: next profile or NULL if done
2145  * Requires: profile->ns.lock to be held
2154 	/* is next profile a child */  in __next_profile()
2159 	/* is next profile a sibling, parent sibling, gp, sibling, .. */  in __next_profile()
2171 	/* is next another profile in the namespace */  in __next_profile()
2180  * next_profile - step to the next profile in where ever it may be
2182  * @profile: current profile  (NOT NULL)
2184  * Returns: next profile or NULL if there isn't one
2187 				       struct aa_profile *profile)  in next_profile()  argument
2189 	struct aa_profile *next = __next_profile(profile);  in next_profile()
2194 	return __first_profile(root, __next_ns(root, profile->ns));  in next_profile()
2198  * p_start - start a depth first traversal of profile tree
2202  * Returns: first profile under current namespace or NULL if none found
2208 	struct aa_profile *profile = NULL;  in p_start()  local
2213 	/* find the first profile */  in p_start()
2215 	profile = __first_profile(root, root);  in p_start()
2218 	for (; profile && l > 0; l--)  in p_start()
2219 		profile = next_profile(root, profile);  in p_start()
2221 	return profile;  in p_start()
2225  * p_next - read the next profile entry
2227  * @p: profile previously returned
2230  * Returns: next profile after @p or NULL if none
2236 	struct aa_profile *profile = p;  in p_next()  local
2240 	return next_profile(ns, profile);  in p_next()
2246  * @p: the last profile writen
2252 	struct aa_profile *profile = p;  in p_stop()  local
2255 	if (profile) {  in p_stop()
2256 		for (ns = profile->ns; ns && ns != root; ns = ns->parent)  in p_stop()
2264  * seq_show_profile - show a profile entry
2266  * @p: current position (profile)    (NOT NULL)
2272 	struct aa_profile *profile = (struct aa_profile *)p;  in seq_show_profile()  local
2275 	aa_label_seq_xprint(f, root, &profile->label,  in seq_show_profile()
2368 	AA_SFS_FILE_BOOLEAN("profile",		1),
2680 	/* TODO: add default profile to apparmorfs */  in aa_create_aafs()