Lines Matching refs:perms
96 struct aa_profile *profile, struct aa_perms *perms, in aa_audit_file() argument
115 u32 mask = perms->audit; in aa_audit_file()
128 ad.request = ad.request & ~perms->allow; in aa_audit_file()
131 if (ad.request & perms->kill) in aa_audit_file()
135 if ((ad.request & perms->quiet) && in aa_audit_file()
138 ad.request &= ~perms->quiet; in aa_audit_file()
144 ad.denied = ad.request & ~perms->allow; in aa_audit_file()
187 if (!(rules->perms)) in aa_lookup_condperms()
192 return &(rules->perms[index]); in aa_lookup_condperms()
193 return &(rules->perms[index + 1]); in aa_lookup_condperms()
196 return &(rules->perms[index]); in aa_lookup_condperms()
211 struct aa_perms *perms) in aa_str_perms() argument
215 *perms = *(aa_lookup_condperms(current_fsuid(), file_rules, state, in aa_str_perms()
224 struct aa_perms *perms) in __aa_path_perm() argument
233 name, cond, perms); in __aa_path_perm()
234 if (request & ~perms->allow) in __aa_path_perm()
237 profile, perms, op, request, name, NULL, NULL, in __aa_path_perm()
246 struct aa_perms *perms) in profile_path_perm() argument
260 flags, perms); in profile_path_perm()
280 struct aa_perms perms = {}; in aa_path_perm() local
292 request, cond, flags, &perms)); in aa_path_perm()
327 struct aa_perms lperms = {}, perms; in profile_path_link() local
357 aa_str_perms(rules->file, state, tname, cond, &perms); in profile_path_link()
362 lperms.audit = perms.audit; in profile_path_link()
363 lperms.quiet = perms.quiet; in profile_path_link()
364 lperms.kill = perms.kill; in profile_path_link()
366 if (!(perms.allow & AA_MAY_LINK)) { in profile_path_link()
368 lperms = perms; in profile_path_link()
373 if (!(perms.allow & AA_LINK_SUBSET)) in profile_path_link()
380 tname, cond, &perms); in profile_path_link()
384 lperms.allow &= perms.allow | AA_MAY_LINK; in profile_path_link()
386 request |= AA_AUDIT_FILE_MASK & (lperms.allow & ~perms.allow); in profile_path_link()
390 !xindex_is_subset(lperms.xindex, perms.xindex)) { in profile_path_link()
484 struct aa_perms perms = {}; in __file_path_perm() local
508 request, &cond, flags, &perms)); in __file_path_perm()
523 &perms)); in __file_path_perm()
529 &perms)); in __file_path_perm()