Lines Matching refs:scontext
81 static int context_struct_to_string(struct context *context, char **scontext,
84 static int context_struct_compute_av(struct context *scontext,
101 static int constraint_expr_eval(struct context *scontext, in constraint_expr_eval() argument
137 val1 = scontext->user; in constraint_expr_eval()
141 val1 = scontext->type; in constraint_expr_eval()
145 val1 = scontext->role; in constraint_expr_eval()
168 l1 = &(scontext->range.level[0]); in constraint_expr_eval()
172 l1 = &(scontext->range.level[0]); in constraint_expr_eval()
176 l1 = &(scontext->range.level[1]); in constraint_expr_eval()
180 l1 = &(scontext->range.level[1]); in constraint_expr_eval()
184 l1 = &(scontext->range.level[0]); in constraint_expr_eval()
185 l2 = &(scontext->range.level[1]); in constraint_expr_eval()
235 c = scontext; in constraint_expr_eval()
298 static void security_dump_masked_av(struct context *scontext, in security_dump_masked_av() argument
332 if ( context_struct_to_string(scontext, in security_dump_masked_av()
370 static void type_attribute_bounds_av(struct context *scontext, in type_attribute_bounds_av() argument
380 = policydb.type_val_to_struct[scontext->type - 1]; in type_attribute_bounds_av()
389 memcpy(&lo_scontext, scontext, sizeof(lo_scontext)); in type_attribute_bounds_av()
409 context_struct_compute_av(scontext, in type_attribute_bounds_av()
443 security_dump_masked_av(scontext, tcontext, in type_attribute_bounds_av()
452 static int context_struct_compute_av(struct context *scontext, in context_struct_compute_av() argument
490 sattr = &policydb.type_attr_map[scontext->type - 1]; in context_struct_compute_av()
524 !constraint_expr_eval(scontext, tcontext, NULL, constraint->expr)) in context_struct_compute_av()
538 scontext->role != tcontext->role ) in context_struct_compute_av()
542 if ( scontext->role == ra->role && tcontext->role == ra->new_role ) in context_struct_compute_av()
554 type_attribute_bounds_av(scontext, tcontext, in context_struct_compute_av()
669 struct context *scontext = NULL, *tcontext = NULL; in security_compute_av() local
683 scontext = sidtab_search(&sidtab, ssid); in security_compute_av()
684 if ( !scontext ) in security_compute_av()
698 rc = context_struct_compute_av(scontext, tcontext, tclass, requested, avd); in security_compute_av()
701 if ( ebitmap_get_bit(&policydb.permissive_map, scontext->type) ) in security_compute_av()
715 static int context_struct_to_string(struct context *context, char **scontext, u32 *scontext_len) in context_struct_to_string() argument
719 *scontext = NULL; in context_struct_to_string()
733 *scontext = scontextp; in context_struct_to_string()
765 int security_sid_to_context(u32 sid, char **scontext, u32 *scontext_len) in security_sid_to_context() argument
779 *scontext = scontextp; in security_sid_to_context()
796 rc = context_struct_to_string(context, scontext, scontext_len); in security_sid_to_context()
815 int security_context_to_sid(char *scontext, u32 scontext_len, u32 *sid) in security_context_to_sid() argument
831 if ( !strcmp(initial_sid_to_string[i], scontext) ) in security_context_to_sid()
853 memcpy(scontext2, scontext, scontext_len); in security_context_to_sid()
937 struct context *scontext, struct context *tcontext, u16 tclass, in compute_sid_handle_invalid_context() argument
943 if ( context_struct_to_string(scontext, &s, &slen) < 0 ) in compute_sid_handle_invalid_context()
969 struct context *scontext = NULL, *tcontext = NULL, newcontext; in security_compute_sid() local
992 scontext = sidtab_search(&sidtab, ssid); in security_compute_sid()
993 if ( !scontext ) in security_compute_sid()
1015 newcontext.user = scontext->user; in security_compute_sid()
1028 newcontext.role = scontext->role; in security_compute_sid()
1029 newcontext.type = scontext->type; in security_compute_sid()
1039 avkey.source_type = scontext->type; in security_compute_sid()
1074 if ( roletr->role == scontext->role && in security_compute_sid()
1090 rc = mls_compute_sid(scontext, tcontext, tclass, specified, &newcontext); in security_compute_sid()
1097 rc = compute_sid_handle_invalid_context(scontext, tcontext, tclass, in security_compute_sid()