Home
last modified time | relevance | path

Searched refs:unconfined (Results 1 – 14 of 14) sorted by relevance

/linux-6.3-rc2/security/apparmor/include/
A Dpolicy_ns.h63 struct aa_profile *unconfined; member
82 #define ns_unconfined(NS) (&(NS)->unconfined->label)
116 aa_get_profile(ns->unconfined); in aa_get_ns()
130 aa_put_profile(ns->unconfined); in aa_put_ns()
A Dlabel.h144 #define unconfined(X) label_unconfined(X) macro
/linux-6.3-rc2/security/apparmor/
A Dpolicy_ns.c122 ns->unconfined = alloc_unconfined("unconfined"); in alloc_ns()
123 if (!ns->unconfined) in alloc_ns()
126 ns->unconfined->ns = ns; in alloc_ns()
157 ns->unconfined->ns = NULL; in aa_free_ns()
158 aa_free_profile(ns->unconfined); in aa_free_ns()
416 root_ns->unconfined->ns = aa_get_ns(root_ns); in aa_alloc_root_ns()
A Dlsm.c161 if (!unconfined(label)) { in apparmor_capget()
190 if (!unconfined(label)) in apparmor_capable()
213 if (!unconfined(label)) in common_perm()
359 if (!unconfined(label)) in apparmor_path_link()
379 if (!unconfined(label)) { in apparmor_path_rename()
460 if (!unconfined(label)) { in apparmor_file_open()
586 if (!unconfined(label)) { in apparmor_sb_mount()
611 if (!unconfined(label)) in apparmor_sb_umount()
625 if (!unconfined(label)) in apparmor_sb_pivotroot()
744 (unconfined(new_label))) in apparmor_bprm_committing_creds()
[all …]
A Ddomain.c56 if (!tracer || unconfined(tracerl)) in may_change_ptraced_domain()
885 if ((bprm->unsafe & LSM_UNSAFE_NO_NEW_PRIVS) && !unconfined(label) && in apparmor_bprm_creds_for_exec()
923 !unconfined(label) && in apparmor_bprm_creds_for_exec()
1173 if (task_no_new_privs(current) && !unconfined(label) && !ctx->nnp) in aa_change_hat()
1176 if (unconfined(label)) { in aa_change_hat()
1200 if (task_no_new_privs(current) && !unconfined(label) && in aa_change_hat()
1221 if (task_no_new_privs(current) && !unconfined(label) && in aa_change_hat()
1320 if (task_no_new_privs(current) && !unconfined(label) && !ctx->nnp) in aa_change_profile()
1418 if (task_no_new_privs(current) && !unconfined(label) && in aa_change_profile()
A Dtask.c70 if (unconfined(label) || (labels_ns(old) != labels_ns(label))) in aa_replace_current_label()
247 if (profile_unconfined(tracee) || unconfined(tracer) || in profile_tracee_perm()
A Dnet.c156 if (ctx->label != kernel_t && !unconfined(label)) { in aa_label_sk_perm()
204 label = aa_label_strn_parse(&root_ns->unconfined->label, in apparmor_secmark_init()
A Dsecid.c98 label = aa_label_strn_parse(&root_ns->unconfined->label, secdata, in apparmor_secctx_to_secid()
A Daudit.c238 rule->label = aa_label_parse(&root_ns->unconfined->label, rulestr, in aa_audit_rule_init()
A Dfile.c574 if (unconfined(label) || unconfined(flabel) || in aa_file_perm()
A Dlabel.c1537 if ((flags & FLAG_SHOW_MODE) && profile != profile->ns->unconfined) { in aa_profile_snxprint()
1563 if (profile == profile->ns->unconfined) in label_modename()
1596 profile != profile->ns->unconfined) in display_mode()
1900 base != &root_ns->unconfined->label)) in aa_label_strn_parse()
A Dpolicy.c540 profile = aa_get_newest_profile(ns->unconfined); in aa_lookupn_profile()
571 profile = aa_get_newest_profile(ns->unconfined); in aa_fqlookupn_profile()
/linux-6.3-rc2/Documentation/admin-guide/LSM/
A Dapparmor.rst11 them run in an unconfined state which is equivalent to standard Linux DAC
A DSmack.rst309 unconfined
856 Another feature of bringup mode is the "unconfined" option. Writing
857 a label to /sys/fs/smackfs/unconfined makes subjects with that label
859 all subjects. Any access that is granted because a label is unconfined

Completed in 28 milliseconds