Lines Matching refs:label
254 struct aa_ruleset *rules = profile->label.rules[0]; in aa_profile_af_perm()
272 int aa_af_perm(const struct cred *subj_cred, struct aa_label *label, in aa_af_perm() argument
278 return fn_for_each_confined(label, profile, in aa_af_perm()
284 struct aa_label *label, in aa_label_sk_perm() argument
291 AA_BUG(!label); in aa_label_sk_perm()
294 if (rcu_access_pointer(ctx->label) != kernel_t && !unconfined(label)) { in aa_label_sk_perm()
299 error = fn_for_each_confined(label, profile, in aa_label_sk_perm()
308 struct aa_label *label; in aa_sk_perm() local
315 label = begin_current_label_crit_section(); in aa_sk_perm()
316 error = aa_label_sk_perm(current_cred(), label, op, request, sk); in aa_sk_perm()
317 end_current_label_crit_section(label); in aa_sk_perm()
323 int aa_sock_file_perm(const struct cred *subj_cred, struct aa_label *label, in aa_sock_file_perm() argument
328 AA_BUG(!label); in aa_sock_file_perm()
333 return aa_unix_file_perm(subj_cred, label, op, request, file); in aa_sock_file_perm()
334 return aa_label_sk_perm(subj_cred, label, op, request, sock->sk); in aa_sock_file_perm()
340 struct aa_label *label; in apparmor_secmark_init() local
342 if (secmark->label[0] == '*') { in apparmor_secmark_init()
347 label = aa_label_strn_parse(&root_ns->unconfined->label, in apparmor_secmark_init()
348 secmark->label, strlen(secmark->label), in apparmor_secmark_init()
351 if (IS_ERR(label)) in apparmor_secmark_init()
352 return PTR_ERR(label); in apparmor_secmark_init()
354 secmark->secid = label->secid; in apparmor_secmark_init()
364 struct aa_ruleset *rules = profile->label.rules[0]; in aa_secmark_perm()
393 int apparmor_secmark_check(struct aa_label *label, char *op, u32 request, in apparmor_secmark_check() argument
399 return fn_for_each_confined(label, profile, in apparmor_secmark_check()