| /Linux-v4.19/security/apparmor/include/ |
| D | label.h | 63 struct aa_label *aa_vec_find_or_create_label(struct aa_profile **vec, int len,
108 struct aa_label;
111 struct aa_label __rcu *label;
129 struct aa_label { struct
158 int aa_label_next_confined(struct aa_label *l, int i); argument
282 void aa_label_free(struct aa_label *label);
284 bool aa_label_init(struct aa_label *label, int size, gfp_t gfp);
285 struct aa_label *aa_label_alloc(int size, struct aa_proxy *proxy, gfp_t gfp);
287 bool aa_label_is_subset(struct aa_label *set, struct aa_label *sub);
289 struct aa_label *set,
[all …]
|
| D | cred.h | 37 static inline struct aa_label *aa_cred_raw_label(const struct cred *cred) in aa_cred_raw_label()
39 struct aa_label *label = cred_label(cred); in aa_cred_raw_label()
51 static inline struct aa_label *aa_get_newest_cred_label(const struct cred *cred) in aa_get_newest_cred_label()
64 static inline struct aa_label *__aa_task_raw_label(struct task_struct *task) in __aa_task_raw_label()
77 static inline struct aa_label *aa_current_raw_label(void) in aa_current_raw_label()
91 static inline struct aa_label *aa_get_current_label(void) in aa_get_current_label()
93 struct aa_label *l = aa_current_raw_label(); in aa_get_current_label()
110 static inline void end_current_label_crit_section(struct aa_label *label) in end_current_label_crit_section()
128 static inline struct aa_label *__begin_current_label_crit_section(void) in __begin_current_label_crit_section()
130 struct aa_label *label = aa_current_raw_label(); in __begin_current_label_crit_section()
[all …]
|
| D | mount.h | 32 int aa_remount(struct aa_label *label, const struct path *path,
35 int aa_bind_mount(struct aa_label *label, const struct path *path,
39 int aa_mount_change_type(struct aa_label *label, const struct path *path,
42 int aa_move_mount(struct aa_label *label, const struct path *path,
45 int aa_new_mount(struct aa_label *label, const char *dev_name,
49 int aa_umount(struct aa_label *label, struct vfsmount *mnt, int flags);
51 int aa_pivotroot(struct aa_label *label, const struct path *old_path,
|
| D | task.h | 27 struct aa_label *nnp;
28 struct aa_label *onexec;
29 struct aa_label *previous;
33 int aa_replace_current_label(struct aa_label *label);
34 int aa_set_current_onexec(struct aa_label *label, bool stack);
35 int aa_set_current_hat(struct aa_label *label, u64 token);
37 struct aa_label *aa_get_task_label(struct task_struct *task);
|
| D | ipc.h | 36 int aa_may_ptrace(struct aa_label *tracer, struct aa_label *tracee,
38 int aa_may_signal(struct aa_label *sender, struct aa_label *target, int sig);
|
| D | secid.h | 20 struct aa_label;
25 struct aa_label *aa_secid_to_label(u32 secid);
31 int aa_alloc_secid(struct aa_label *label, gfp_t gfp);
33 void aa_secid_update(u32 secid, struct aa_label *label);
|
| D | file.h | 44 struct aa_label __rcu *label;
55 static inline struct aa_file_ctx *aa_alloc_file_ctx(struct aa_label *label, in aa_alloc_file_ctx()
80 static inline struct aa_label *aa_get_file_label(struct aa_file_ctx *ctx) in aa_get_file_label()
162 const char *target, struct aa_label *tlabel, kuid_t ouid,
193 int aa_path_perm(const char *op, struct aa_label *label,
197 int aa_path_link(struct aa_label *label, struct dentry *old_dentry,
200 int aa_file_perm(const char *op, struct aa_label *label, struct file *file,
|
| D | resource.h | 40 int aa_task_setrlimit(struct aa_label *label, struct task_struct *task,
43 void __aa_transition_rlimits(struct aa_label *old, struct aa_label *new);
|
| D | net.h | 54 struct aa_label *label;
55 struct aa_label *peer;
91 int aa_af_perm(struct aa_label *label, const char *op, u32 request, u16 family,
103 int aa_sock_file_perm(struct aa_label *label, const char *op, u32 request,
|
| D | policy.h | 163 struct aa_label label;
189 struct aa_profile *aa_fqlookupn_profile(struct aa_label *base,
193 ssize_t aa_replace_profiles(struct aa_ns *view, struct aa_label *label,
195 ssize_t aa_remove_profiles(struct aa_ns *view, struct aa_label *label,
298 int aa_may_manage_policy(struct aa_label *label, struct aa_ns *ns,
|
| D | capability.h | 22 struct aa_label;
43 int aa_capable(struct aa_label *label, int cap, int audit);
|
| D | audit.h | 115 struct aa_label *label;
123 struct aa_label *peer;
|
| D | procattr.h | 18 int aa_getprocattr(struct aa_label *label, char **string);
|
| D | domain.h | 34 struct aa_label *x_table_lookup(struct aa_profile *profile, u32 xindex,
|
| /Linux-v4.19/security/apparmor/ |
| D | label.c | 52 RCU_INIT_POINTER(proxy->label, (struct aa_label *)PROXY_POISON); in free_proxy()
64 struct aa_proxy *aa_alloc_proxy(struct aa_label *label, gfp_t gfp) in aa_alloc_proxy()
77 void __aa_proxy_redirect(struct aa_label *orig, struct aa_label *new) in __aa_proxy_redirect()
79 struct aa_label *tmp; in __aa_proxy_redirect()
92 static void __proxy_share(struct aa_label *old, struct aa_label *new) in __proxy_share()
316 static void label_destroy(struct aa_label *label) in label_destroy()
318 struct aa_label *tmp; in label_destroy()
348 void aa_label_free(struct aa_label *label) in aa_label_free()
357 static void label_free_switch(struct aa_label *label) in label_free_switch()
369 struct aa_label *label = container_of(head, struct aa_label, rcu); in label_free_rcu()
[all …]
|
| D | task.c | 28 struct aa_label *aa_get_task_label(struct task_struct *task) in aa_get_task_label()
30 struct aa_label *p; in aa_get_task_label()
45 int aa_replace_current_label(struct aa_label *label) in aa_replace_current_label()
47 struct aa_label *old = aa_current_raw_label(); in aa_replace_current_label()
64 struct aa_label *tmp = ctx->nnp; in aa_replace_current_label()
97 int aa_set_current_onexec(struct aa_label *label, bool stack) in aa_set_current_onexec()
119 int aa_set_current_hat(struct aa_label *label, u64 token) in aa_set_current_hat()
|
| D | secid.c | 52 void aa_secid_update(u32 secid, struct aa_label *label) in aa_secid_update()
65 struct aa_label *aa_secid_to_label(u32 secid) in aa_secid_to_label()
67 struct aa_label *label; in aa_secid_to_label()
79 struct aa_label *label = aa_secid_to_label(secid); in apparmor_secid_to_secctx()
106 struct aa_label *label; in apparmor_secctx_to_secid()
130 int aa_alloc_secid(struct aa_label *label, gfp_t gfp) in aa_alloc_secid()
|
| D | ipc.c | 70 struct aa_label *peer, u32 request, in profile_ptrace_perm()
83 struct aa_label *tracer, u32 request, in profile_tracee_perm()
94 struct aa_label *tracee, u32 request, in profile_tracer_perm()
123 int aa_may_ptrace(struct aa_label *tracer, struct aa_label *tracee, in aa_may_ptrace()
191 struct aa_label *peer, u32 request, in profile_signal_perm()
211 int aa_may_signal(struct aa_label *sender, struct aa_label *target, int sig) in aa_may_signal()
|
| D | file.c | 107 const char *target, struct aa_label *tlabel, in aa_audit_file()
170 static int path_name(const char *op, struct aa_label *label, in path_name()
328 int aa_path_perm(const char *op, struct aa_label *label, in aa_path_perm()
468 int aa_path_link(struct aa_label *label, struct dentry *old_dentry, in aa_path_link()
491 static void update_file_ctx(struct aa_file_ctx *fctx, struct aa_label *label, in update_file_ctx()
494 struct aa_label *l, *old; in update_file_ctx()
512 static int __file_path_perm(const char *op, struct aa_label *label, in __file_path_perm()
513 struct aa_label *flabel, struct file *file, in __file_path_perm()
565 static int __file_sock_perm(const char *op, struct aa_label *label, in __file_sock_perm()
566 struct aa_label *flabel, struct file *file, in __file_sock_perm()
[all …]
|
| D | domain.c | 63 static int may_change_ptraced_domain(struct aa_label *to_label, in may_change_ptraced_domain()
67 struct aa_label *tracerl = NULL; in may_change_ptraced_domain()
137 struct aa_label *label, bool stack, in label_compound_match()
197 struct aa_label *label, bool stack, in label_components_match()
257 static int label_match(struct aa_profile *profile, struct aa_label *label, in label_match()
291 struct aa_label *target, bool stack, in change_profile_perms()
478 static struct aa_label *find_attach(const struct linux_binprm *bprm, in find_attach()
504 struct aa_label *x_table_lookup(struct aa_profile *profile, u32 xindex, in x_table_lookup()
507 struct aa_label *label = NULL; in x_table_lookup()
550 static struct aa_label *x_to_label(struct aa_profile *profile, in x_to_label()
[all …]
|
| D | resource.c | 57 unsigned long value, struct aa_label *peer, in audit_resource()
108 int aa_task_setrlimit(struct aa_label *label, struct task_struct *task, in aa_task_setrlimit()
112 struct aa_label *peer; in aa_task_setrlimit()
145 void __aa_transition_rlimits(struct aa_label *old_l, struct aa_label *new_l) in __aa_transition_rlimits()
|
| D | lsm.c | 114 struct aa_label *tracer, *tracee; in apparmor_ptrace_access_check()
130 struct aa_label *tracer, *tracee; in apparmor_ptrace_traceme()
146 struct aa_label *label; in apparmor_capget()
179 struct aa_label *label; in apparmor_capable()
202 struct aa_label *label; in common_perm()
335 struct aa_label *label; in apparmor_path_link()
352 struct aa_label *label; in apparmor_path_rename()
401 struct aa_label *label; in apparmor_file_open()
437 struct aa_label *label = begin_current_label_crit_section(); in apparmor_file_alloc_security()
453 struct aa_label *label; in common_file_perm()
[all …]
|
| D | net.c | 135 int aa_af_perm(struct aa_label *label, const char *op, u32 request, u16 family, in aa_af_perm()
146 static int aa_label_sk_perm(struct aa_label *label, const char *op, u32 request, in aa_label_sk_perm()
164 struct aa_label *label; in aa_sk_perm()
179 int aa_sock_file_perm(struct aa_label *label, const char *op, u32 request, in aa_sock_file_perm()
|
| D | mount.c | 401 int aa_remount(struct aa_label *label, const struct path *path, in aa_remount()
423 int aa_bind_mount(struct aa_label *label, const struct path *path, in aa_bind_mount()
453 int aa_mount_change_type(struct aa_label *label, const struct path *path, in aa_mount_change_type()
476 int aa_move_mount(struct aa_label *label, const struct path *path, in aa_move_mount()
504 int aa_new_mount(struct aa_label *label, const char *dev_name, in aa_new_mount()
587 int aa_umount(struct aa_label *label, struct vfsmount *mnt, int flags) in aa_umount()
609 static struct aa_label *build_pivotroot(struct aa_profile *profile, in build_pivotroot()
661 int aa_pivotroot(struct aa_label *label, const struct path *old_path, in aa_pivotroot()
665 struct aa_label *target = NULL; in aa_pivotroot()
|
| D | audit.c | 81 struct aa_label *label = aad(sa)->label; in audit_pre()
168 struct aa_label *label;
232 struct aa_label *label; in aa_audit_rule_match()
|
