Lines Matching refs:perms

120 				struct aa_perms *perms)  in label_compound_match()  argument
139 *perms = allperms; in label_compound_match()
151 *perms = *(aa_lookup_fperms(&(rules->file), state, &cond)); in label_compound_match()
152 aa_apply_modes_to_perms(profile, perms); in label_compound_match()
153 if ((perms->allow & request) != request) in label_compound_match()
159 *perms = nullperms; in label_compound_match()
182 struct aa_perms *perms) in label_components_match() argument
208 aa_perms_accum(perms, &tmp); in label_components_match()
217 aa_perms_accum(perms, &tmp); in label_components_match()
220 if ((perms->allow & request) != request) in label_components_match()
226 *perms = nullperms; in label_components_match()
244 struct aa_perms *perms) in label_match() argument
248 *perms = nullperms; in label_match()
250 request, perms); in label_match()
254 *perms = allperms; in label_match()
256 request, perms); in label_match()
278 struct aa_perms *perms) in change_profile_perms() argument
281 perms->allow = AA_MAY_CHANGE_PROFILE | AA_MAY_ONEXEC; in change_profile_perms()
282 perms->audit = perms->quiet = perms->kill = 0; in change_profile_perms()
287 return label_match(profile, target, stack, start, true, request, perms); in change_profile_perms()
332 perm = attach->xmatch.perms[index].allow; in aa_xattrs_match()
417 perm = attach->xmatch.perms[index].allow; in find_attach()
632 struct aa_perms perms = {}; in profile_transition() local
665 state = aa_str_perms(&(rules->file), state, name, cond, &perms); in profile_transition()
666 if (perms.allow & MAY_EXEC) { in profile_transition()
668 new = x_to_label(profile, bprm, name, perms.xindex, &target, in profile_transition()
677 perms.allow &= ~MAY_EXEC; in profile_transition()
692 perms.xindex |= AA_X_UNSAFE; in profile_transition()
701 if (!(perms.xindex & AA_X_UNSAFE)) { in profile_transition()
712 aa_audit_file(profile, &perms, OP_EXEC, MAY_EXEC, name, target, new, in profile_transition()
730 struct aa_perms perms = {}; in profile_onexec() local
762 state = aa_str_perms(&(rules->file), state, xname, cond, &perms); in profile_onexec()
763 if (!(perms.allow & AA_MAY_ONEXEC)) { in profile_onexec()
773 state, &perms); in profile_onexec()
775 perms.allow &= ~AA_MAY_ONEXEC; in profile_onexec()
779 if (!(perms.xindex & AA_X_UNSAFE)) { in profile_onexec()
790 return aa_audit_file(profile, &perms, OP_EXEC, AA_MAY_ONEXEC, xname, in profile_onexec()
1157 struct aa_perms perms = {}; in aa_change_hat() local
1251 perms.kill = AA_MAY_CHANGEHAT; in aa_change_hat()
1255 aa_audit_file(profile, &perms, OP_CHANGE_HAT, in aa_change_hat()
1266 u32 request, struct aa_perms *perms) in change_profile_perms_wrapper() argument
1276 perms); in change_profile_perms_wrapper()
1278 error = aa_audit_file(profile, perms, op, request, name, in change_profile_perms_wrapper()
1302 struct aa_perms perms = {}; in aa_change_profile() local
1385 request, &perms)); in aa_change_profile()
1438 perms.allow = 0; in aa_change_profile()
1454 aa_audit_file(profile, &perms, op, request, auditname, in aa_change_profile()