Lines Matching refs:perms
95 struct aa_profile *profile, struct aa_perms *perms, in aa_audit_file() argument
114 u32 mask = perms->audit; in aa_audit_file()
127 ad.request = ad.request & ~perms->allow; in aa_audit_file()
130 if (ad.request & perms->kill) in aa_audit_file()
134 if ((ad.request & perms->quiet) && in aa_audit_file()
137 ad.request &= ~perms->quiet; in aa_audit_file()
143 ad.denied = ad.request & ~perms->allow; in aa_audit_file()
185 if (!(file_rules->perms)) in aa_lookup_fperms()
189 return &(file_rules->perms[index]); in aa_lookup_fperms()
191 return &(file_rules->perms[index + 1]); in aa_lookup_fperms()
206 struct aa_perms *perms) in aa_str_perms() argument
210 *perms = *(aa_lookup_fperms(file_rules, state, cond)); in aa_str_perms()
218 struct aa_perms *perms) in __aa_path_perm() argument
227 name, cond, perms); in __aa_path_perm()
228 if (request & ~perms->allow) in __aa_path_perm()
231 profile, perms, op, request, name, NULL, NULL, in __aa_path_perm()
240 struct aa_perms *perms) in profile_path_perm() argument
254 flags, perms); in profile_path_perm()
274 struct aa_perms perms = {}; in aa_path_perm() local
286 request, cond, flags, &perms)); in aa_path_perm()
322 struct aa_perms lperms = {}, perms; in profile_path_link() local
352 aa_str_perms(rules->file, state, tname, cond, &perms); in profile_path_link()
357 lperms.audit = perms.audit; in profile_path_link()
358 lperms.quiet = perms.quiet; in profile_path_link()
359 lperms.kill = perms.kill; in profile_path_link()
361 if (!(perms.allow & AA_MAY_LINK)) { in profile_path_link()
363 lperms = perms; in profile_path_link()
368 if (!(perms.allow & AA_LINK_SUBSET)) in profile_path_link()
375 tname, cond, &perms); in profile_path_link()
379 lperms.allow &= perms.allow | AA_MAY_LINK; in profile_path_link()
381 request |= AA_AUDIT_FILE_MASK & (lperms.allow & ~perms.allow); in profile_path_link()
385 !xindex_is_subset(lperms.xindex, perms.xindex)) { in profile_path_link()
477 struct aa_perms perms = {}; in __file_path_perm() local
501 request, &cond, flags, &perms)); in __file_path_perm()
516 &perms)); in __file_path_perm()
522 &perms)); in __file_path_perm()