Lines Matching refs:perms
92 int aa_audit_file(struct aa_profile *profile, struct aa_perms *perms, in aa_audit_file() argument
111 u32 mask = perms->audit; in aa_audit_file()
124 aad(&sa)->request = aad(&sa)->request & ~perms->allow; in aa_audit_file()
127 if (aad(&sa)->request & perms->kill) in aa_audit_file()
131 if ((aad(&sa)->request & perms->quiet) && in aa_audit_file()
134 aad(&sa)->request &= ~perms->quiet; in aa_audit_file()
140 aad(&sa)->denied = aad(&sa)->request & ~perms->allow; in aa_audit_file()
180 if (!(file_rules->perms)) in aa_lookup_fperms()
184 return &(file_rules->perms[index]); in aa_lookup_fperms()
186 return &(file_rules->perms[index + 1]); in aa_lookup_fperms()
201 struct aa_perms *perms) in aa_str_perms() argument
205 *perms = *(aa_lookup_fperms(file_rules, state, cond)); in aa_str_perms()
213 struct aa_perms *perms) in __aa_path_perm() argument
222 name, cond, perms); in __aa_path_perm()
223 if (request & ~perms->allow) in __aa_path_perm()
225 return aa_audit_file(profile, perms, op, request, name, NULL, NULL, in __aa_path_perm()
233 struct aa_perms *perms) in profile_path_perm() argument
247 perms); in profile_path_perm()
265 struct aa_perms perms = {}; in aa_path_perm() local
277 cond, flags, &perms)); in aa_path_perm()
312 struct aa_perms lperms = {}, perms; in profile_path_link() local
340 aa_str_perms(&(rules->file), state, tname, cond, &perms); in profile_path_link()
345 lperms.audit = perms.audit; in profile_path_link()
346 lperms.quiet = perms.quiet; in profile_path_link()
347 lperms.kill = perms.kill; in profile_path_link()
349 if (!(perms.allow & AA_MAY_LINK)) { in profile_path_link()
351 lperms = perms; in profile_path_link()
356 if (!(perms.allow & AA_LINK_SUBSET)) in profile_path_link()
363 tname, cond, &perms); in profile_path_link()
367 lperms.allow &= perms.allow | AA_MAY_LINK; in profile_path_link()
369 request |= AA_AUDIT_FILE_MASK & (lperms.allow & ~perms.allow); in profile_path_link()
373 !xindex_is_subset(lperms.xindex, perms.xindex)) { in profile_path_link()
461 struct aa_perms perms = {}; in __file_path_perm() local
484 request, &cond, flags, &perms)); in __file_path_perm()
498 &perms)); in __file_path_perm()
503 &perms)); in __file_path_perm()