Home
last modified time | relevance | path

Searched refs:restriction (Results 1 – 6 of 6) sorted by relevance

/security/integrity/ima/
A Dima_mok.c26 struct key_restriction *restriction; in ima_mok_init() local
30 restriction = kzalloc(sizeof(struct key_restriction), GFP_KERNEL); in ima_mok_init()
31 if (!restriction) in ima_mok_init()
34 restriction->check = restrict_link_by_builtin_trusted; in ima_mok_init()
43 restriction, NULL); in ima_mok_init()
/security/integrity/
A Ddigsig.c100 struct key_restriction *restriction) in __integrity_init_keyring() argument
107 KEY_ALLOC_NOT_IN_QUOTA, restriction, NULL); in __integrity_init_keyring()
127 struct key_restriction *restriction; in integrity_init_keyring() local
137 restriction = NULL; in integrity_init_keyring()
144 restriction = kzalloc(sizeof(struct key_restriction), GFP_KERNEL); in integrity_init_keyring()
145 if (!restriction) in integrity_init_keyring()
149 restriction->check = restrict_link_by_ca; in integrity_init_keyring()
151 restriction->check = restrict_link_to_ima; in integrity_init_keyring()
162 ret = __integrity_init_keyring(id, perm, restriction); in integrity_init_keyring()
164 kfree(restriction); in integrity_init_keyring()
A DKconfig82 The .machine keyring can be configured to enforce CA restriction
/security/yama/
A DKconfig9 access controls. Currently available is ptrace scope restriction.
/security/keys/
A Dkeyctl.c1734 char *restriction = NULL; in keyctl_restrict_keyring() local
1750 restriction = strndup_user(_restriction, PAGE_SIZE); in keyctl_restrict_keyring()
1751 if (IS_ERR(restriction)) { in keyctl_restrict_keyring()
1752 ret = PTR_ERR(restriction); in keyctl_restrict_keyring()
1760 ret = keyring_restrict(key_ref, _type ? type : NULL, restriction); in keyctl_restrict_keyring()
1761 kfree(restriction); in keyctl_restrict_keyring()
A Dkeyring.c1025 const char *restriction) in keyring_restrict() argument
1051 restrict_link = restrict_type->lookup_restriction(restriction); in keyring_restrict()

Completed in 11 milliseconds