| /security/apparmor/include/ |
| A D | label.h | 103 struct aa_label;
127 struct aa_label { struct
271 bool aa_label_is_subset(struct aa_label *set, struct aa_label *sub);
278 bool aa_label_replace(struct aa_label *old, struct aa_label *new);
285 struct aa_label *aa_label_find_merge(struct aa_label *a, struct aa_label *b);
286 struct aa_label *aa_label_merge(struct aa_label *a, struct aa_label *b,
314 struct aa_label *aa_label_parse(struct aa_label *base, const char *str,
358 static inline struct aa_label *__aa_get_label(struct aa_label *l) in __aa_get_label()
366 static inline struct aa_label *aa_get_label(struct aa_label *l) in aa_get_label()
403 static inline struct aa_label *aa_get_newest_label(struct aa_label *l) in aa_get_newest_label()
[all …]
|
| A D | cred.h | 22 static inline struct aa_label *cred_label(const struct cred *cred) in cred_label()
24 struct aa_label **blob = cred->security + apparmor_blob_sizes.lbs_cred; in cred_label()
31 struct aa_label *label) in set_cred_label()
49 struct aa_label *label = cred_label(cred); in aa_cred_raw_label()
69 struct aa_label *l = aa_cred_raw_label(cred); in aa_get_newest_cred_label_condref()
94 static inline struct aa_label *aa_current_raw_label(void) in aa_current_raw_label()
108 static inline struct aa_label *aa_get_current_label(void) in aa_get_current_label()
110 struct aa_label *l = aa_current_raw_label(); in aa_get_current_label()
160 struct aa_label *label = aa_current_raw_label(); in __begin_current_label_crit_section()
185 struct aa_label *label = aa_current_raw_label(); in begin_current_label_crit_section()
[all …]
|
| A D | mount.h | 29 struct aa_label *label, const struct path *path,
33 struct aa_label *label, const struct path *path,
38 struct aa_label *label, const struct path *path,
42 struct aa_label *label, const struct path *path,
45 struct aa_label *label, const struct path *from_path,
49 struct aa_label *label, const char *dev_name,
54 struct aa_label *label, struct vfsmount *mnt, int flags);
57 struct aa_label *label, const struct path *old_path,
|
| A D | task.h | 26 struct aa_label *nnp;
27 struct aa_label *onexec;
28 struct aa_label *previous;
32 int aa_replace_current_label(struct aa_label *label);
33 void aa_set_current_onexec(struct aa_label *label, bool stack);
34 int aa_set_current_hat(struct aa_label *label, u64 token);
36 struct aa_label *aa_get_task_label(struct task_struct *task);
94 int aa_may_ptrace(const struct cred *tracer_cred, struct aa_label *tracer,
95 const struct cred *tracee_cred, struct aa_label *tracee,
|
| A D | net.h | 50 struct aa_label __rcu *label;
51 struct aa_label __rcu *peer;
52 struct aa_label __rcu *peer_lastupdate; /* ptr cmp only, no deref */
99 int aa_af_perm(const struct cred *subj_cred, struct aa_label *label,
112 int aa_sock_file_perm(const struct cred *subj_cred, struct aa_label *label,
116 int apparmor_secmark_check(struct aa_label *label, char *op, u32 request,
|
| A D | resource.h | 36 int aa_task_setrlimit(const struct cred *subj_cred, struct aa_label *label,
40 void __aa_transition_rlimits(struct aa_label *old, struct aa_label *new);
|
| A D | file.h | 44 struct aa_label __rcu *label;
77 const char *target, struct aa_label *tlabel, kuid_t ouid,
92 struct aa_label *label, const struct path *path,
95 int aa_path_link(const struct cred *subj_cred, struct aa_label *label,
100 struct aa_label *label, struct file *file,
|
| A D | secid.h | 16 struct aa_label;
27 struct aa_label *aa_secid_to_label(u32 secid);
34 int aa_alloc_secid(struct aa_label *label, gfp_t gfp);
|
| A D | af_unix.h | 36 struct aa_label *label, const char *op, u32 request,
38 struct aa_label *peer_label);
40 int aa_unix_create_perm(struct aa_label *label, int family, int type,
52 int aa_unix_file_perm(const struct cred *subj_cred, struct aa_label *label,
|
| A D | policy.h | 257 struct aa_label label;
280 struct aa_profile *aa_fqlookupn_profile(struct aa_label *base,
283 ssize_t aa_replace_profiles(struct aa_ns *view, struct aa_label *label,
285 ssize_t aa_remove_profiles(struct aa_ns *view, struct aa_label *label,
417 struct aa_label *label, struct aa_ns *ns);
419 struct aa_label *label, struct aa_ns *ns);
421 struct aa_label *label, struct aa_ns *ns,
|
| A D | ipc.h | 19 int aa_may_signal(const struct cred *subj_cred, struct aa_label *sender,
20 const struct cred *target_cred, struct aa_label *target,
|
| A D | capability.h | 18 struct aa_label;
40 int aa_capable(const struct cred *subj_cred, struct aa_label *label,
|
| A D | audit.h | 117 struct aa_label *subj_label;
125 struct aa_label *peer;
163 struct aa_label *target;
|
| /security/apparmor/ |
| A D | label.c | 73 void __aa_proxy_redirect(struct aa_label *orig, struct aa_label *new) in __aa_proxy_redirect()
88 static void __proxy_share(struct aa_label *old, struct aa_label *new) in __proxy_share()
369 struct aa_label *label = container_of(head, struct aa_label, rcu); in label_free_rcu()
472 static int label_cmp(struct aa_label *a, struct aa_label *b) in label_cmp()
686 struct aa_label *this = rb_entry(*new, struct aa_label, node); in __label_insert()
740 struct aa_label *this = rb_entry(node, struct aa_label, node); in __vec_find()
765 static struct aa_label *__label_find(struct aa_label *label) in __label_find()
1146 struct aa_label *this = container_of(node, struct aa_label, in __label_find_merge()
1172 struct aa_label *aa_label_find_merge(struct aa_label *a, struct aa_label *b) in aa_label_find_merge()
1208 struct aa_label *aa_label_merge(struct aa_label *a, struct aa_label *b, in aa_label_merge()
[all …]
|
| A D | task.c | 29 struct aa_label *aa_get_task_label(struct task_struct *task) in aa_get_task_label()
31 struct aa_label *p; in aa_get_task_label()
46 int aa_replace_current_label(struct aa_label *label) in aa_replace_current_label()
48 struct aa_label *old = aa_current_raw_label(); in aa_replace_current_label()
65 struct aa_label *tmp = ctx->nnp; in aa_replace_current_label()
97 void aa_set_current_onexec(struct aa_label *label, bool stack) in aa_set_current_onexec()
117 int aa_set_current_hat(struct aa_label *label, u64 token) in aa_set_current_hat()
228 struct aa_label *peer, u32 request, in profile_ptrace_perm()
244 struct aa_label *tracer, u32 request, in profile_tracee_perm()
256 struct aa_label *tracee, u32 request, in profile_tracer_perm()
[all …]
|
| A D | secid.c | 45 struct aa_label *aa_secid_to_label(u32 secid) in aa_secid_to_label()
50 static int apparmor_label_to_secctx(struct aa_label *label, in apparmor_label_to_secctx()
82 struct aa_label *label = aa_secid_to_label(secid); in apparmor_secid_to_secctx()
89 struct aa_label *label; in apparmor_lsmprop_to_secctx()
98 struct aa_label *label; in apparmor_secctx_to_secid()
126 int aa_alloc_secid(struct aa_label *label, gfp_t gfp) in aa_alloc_secid()
|
| A D | af_unix.c | 446 struct aa_label *label, in aa_unix_label_sk_perm()
464 struct aa_label *label; in aa_unix_sock_perm()
491 struct aa_label *label; in aa_unix_bind_perm()
530 struct aa_label *label; in aa_unix_listen_perm()
551 struct aa_label *label; in aa_unix_accept_perm()
584 struct aa_label *label; in aa_unix_opt_perm()
647 struct aa_label *plabel) in update_sk_ctx()
649 struct aa_label *l, *old; in update_sk_ctx()
688 struct aa_label *label) in update_peer_ctx()
690 struct aa_label *l, *old; in update_peer_ctx()
[all …]
|
| A D | file.c | 98 const char *target, struct aa_label *tlabel, in aa_audit_file()
149 struct aa_label *label, in path_name()
276 struct aa_label *label, in aa_path_perm()
460 struct aa_label *l, *old; in update_file_ctx()
479 struct aa_label *label, in __file_path_perm()
480 struct aa_label *flabel, struct file *file, in __file_path_perm()
540 struct aa_label *label, in __file_sock_perm()
541 struct aa_label *flabel, struct file *file, in __file_sock_perm()
605 struct aa_label *label, struct file *file, in aa_file_perm()
609 struct aa_label *flabel; in aa_file_perm()
[all …]
|
| A D | domain.c | 49 struct aa_label *to_label, in may_change_ptraced_domain()
53 struct aa_label *tracerl = NULL; in may_change_ptraced_domain()
129 struct aa_label *label, bool stack, in label_compound_match()
521 struct aa_label *label = NULL; in x_table_lookup()
574 struct aa_label *new = NULL; in x_to_label()
575 struct aa_label *stack = NULL; in x_to_label()
647 struct aa_label *base = new; in x_to_label()
666 struct aa_label *new = NULL; in profile_transition()
868 struct aa_label *label, in handle_onexec()
875 struct aa_label *new; in handle_onexec()
[all …]
|
| A D | resource.c | 58 unsigned long value, struct aa_label *peer, in audit_resource()
114 int aa_task_setrlimit(const struct cred *subj_cred, struct aa_label *label, in aa_task_setrlimit()
119 struct aa_label *peer; in aa_task_setrlimit()
153 void __aa_transition_rlimits(struct aa_label *old_l, struct aa_label *new_l) in __aa_transition_rlimits()
|
| A D | lsm.c | 166 struct aa_label *label; in apparmor_capget()
198 struct aa_label *label; in apparmor_capable()
221 struct aa_label *label; in common_perm()
366 struct aa_label *label; in apparmor_path_link()
385 struct aa_label *label; in apparmor_path_rename()
462 struct aa_label *label; in apparmor_file_open()
525 struct aa_label *label; in common_file_perm()
666 struct aa_label *label; in apparmor_uring_override_creds()
691 struct aa_label *label; in apparmor_uring_sqpoll()
710 struct aa_label *label; in apparmor_sb_mount()
[all …]
|
| A D | ipc.c | 80 struct aa_label *peer, u32 request, in profile_signal_perm()
102 int aa_may_signal(const struct cred *subj_cred, struct aa_label *sender, in aa_may_signal()
103 const struct cred *target_cred, struct aa_label *target, in aa_may_signal()
|
| A D | mount.c | 395 struct aa_label *label, const struct path *path, in aa_remount()
421 struct aa_label *label, const struct path *path, in aa_bind_mount()
459 struct aa_label *label, const struct path *path, in aa_mount_change_type()
486 struct aa_label *label, const struct path *from_path, in aa_move_mount()
517 int aa_move_mount_old(const struct cred *subj_cred, struct aa_label *label, in aa_move_mount_old()
535 int aa_new_mount(const struct cred *subj_cred, struct aa_label *label, in aa_new_mount()
635 int aa_umount(const struct cred *subj_cred, struct aa_label *label, in aa_umount()
661 static struct aa_label *build_pivotroot(const struct cred *subj_cred, in build_pivotroot()
716 int aa_pivotroot(const struct cred *subj_cred, struct aa_label *label, in aa_pivotroot()
721 struct aa_label *target = NULL; in aa_pivotroot()
|
| A D | net.c | 272 int aa_af_perm(const struct cred *subj_cred, struct aa_label *label, in aa_af_perm()
284 struct aa_label *label, in aa_label_sk_perm()
308 struct aa_label *label; in aa_sk_perm()
323 int aa_sock_file_perm(const struct cred *subj_cred, struct aa_label *label, in aa_sock_file_perm()
340 struct aa_label *label; in apparmor_secmark_init()
393 int apparmor_secmark_check(struct aa_label *label, char *op, u32 request, in apparmor_secmark_check()
|
| A D | audit.c | 117 struct aa_label *label = ad->subj_label; in audit_pre()
206 struct aa_label *label;
270 struct aa_label *label; in aa_audit_rule_match()
|