Lines Matching refs:label
46 aa_put_label(rcu_dereference_protected(proxy->label, true)); in free_proxy()
48 RCU_INIT_POINTER(proxy->label, (struct aa_label *)PROXY_POISON); in free_proxy()
60 struct aa_proxy *aa_alloc_proxy(struct aa_label *label, gfp_t gfp) in aa_alloc_proxy() argument
67 rcu_assign_pointer(new->label, aa_get_label(label)); in aa_alloc_proxy()
81 tmp = rcu_dereference_protected(orig->proxy->label, in __aa_proxy_redirect()
83 rcu_assign_pointer(orig->proxy->label, aa_get_label(new)); in __aa_proxy_redirect()
209 u |= vec[i]->label.flags & (FLAG_DEBUG1 | FLAG_DEBUG2 | in accum_vec_flags()
211 if (!(u & vec[i]->label.flags & FLAG_UNCONFINED)) in accum_vec_flags()
317 void aa_label_destroy(struct aa_label *label) in aa_label_destroy() argument
319 AA_BUG(!label); in aa_label_destroy()
321 if (!label_isprofile(label)) { in aa_label_destroy()
325 aa_put_str(label->hname); in aa_label_destroy()
327 label_for_each(i, label, profile) { in aa_label_destroy()
329 label->vec[i.i] = (struct aa_profile *) in aa_label_destroy()
334 if (label->proxy) { in aa_label_destroy()
335 if (rcu_dereference_protected(label->proxy->label, true) == label) in aa_label_destroy()
336 rcu_assign_pointer(label->proxy->label, NULL); in aa_label_destroy()
337 aa_put_proxy(label->proxy); in aa_label_destroy()
339 aa_free_secid(label->secid); in aa_label_destroy()
341 label->proxy = (struct aa_proxy *) PROXY_POISON + 1; in aa_label_destroy()
344 void aa_label_free(struct aa_label *label) in aa_label_free() argument
346 if (!label) in aa_label_free()
349 aa_label_destroy(label); in aa_label_free()
350 kfree(label); in aa_label_free()
353 static void label_free_switch(struct aa_label *label) in label_free_switch() argument
355 if (label->flags & FLAG_NS_COUNT) in label_free_switch()
356 aa_free_ns(labels_ns(label)); in label_free_switch()
357 else if (label_isprofile(label)) in label_free_switch()
358 aa_free_profile(labels_profile(label)); in label_free_switch()
360 aa_label_free(label); in label_free_switch()
365 struct aa_label *label = container_of(head, struct aa_label, rcu); in label_free_rcu() local
367 if (label->flags & FLAG_IN_TREE) in label_free_rcu()
368 (void) aa_label_remove(label); in label_free_rcu()
369 label_free_switch(label); in label_free_rcu()
374 struct aa_label *label = container_of(kref, struct aa_label, count); in aa_label_kref() local
375 struct aa_ns *ns = labels_ns(label); in aa_label_kref()
379 label_free_switch(label); in aa_label_kref()
383 AA_BUG(label_isprofile(label) && in aa_label_kref()
384 on_list_rcu(&label->vec[0]->base.profiles)); in aa_label_kref()
385 AA_BUG(label_isprofile(label) && in aa_label_kref()
386 on_list_rcu(&label->vec[0]->base.list)); in aa_label_kref()
389 call_rcu(&label->rcu, label_free_rcu); in aa_label_kref()
392 static void label_free_or_put_new(struct aa_label *label, struct aa_label *new) in label_free_or_put_new() argument
394 if (label != new) in label_free_or_put_new()
401 bool aa_label_init(struct aa_label *label, int size, gfp_t gfp) in aa_label_init() argument
403 AA_BUG(!label); in aa_label_init()
406 if (aa_alloc_secid(label, gfp) < 0) in aa_label_init()
409 label->size = size; /* doesn't include null */ in aa_label_init()
410 label->vec[size] = NULL; /* null terminate */ in aa_label_init()
411 kref_init(&label->count); in aa_label_init()
412 RB_CLEAR_NODE(&label->node); in aa_label_init()
479 int aa_label_next_confined(struct aa_label *label, int i) in aa_label_next_confined() argument
481 AA_BUG(!label); in aa_label_next_confined()
484 for (; i < label->size; i++) { in aa_label_next_confined()
485 if (!profile_unconfined(label->vec[i])) in aa_label_next_confined()
595 static bool __label_remove(struct aa_label *label, struct aa_label *new) in __label_remove() argument
597 struct aa_labelset *ls = labels_set(label); in __label_remove()
600 AA_BUG(!label); in __label_remove()
604 __aa_proxy_redirect(label, new); in __label_remove()
606 if (!label_is_stale(label)) in __label_remove()
607 __label_make_stale(label); in __label_remove()
609 if (label->flags & FLAG_IN_TREE) { in __label_remove()
610 rb_erase(&label->node, &ls->root); in __label_remove()
611 label->flags &= ~FLAG_IN_TREE; in __label_remove()
668 struct aa_label *label, bool replace) in __label_insert() argument
673 AA_BUG(!label); in __label_insert()
674 AA_BUG(labels_set(label) != ls); in __label_insert()
676 AA_BUG(label->flags & FLAG_IN_TREE); in __label_insert()
682 int result = label_cmp(label, this); in __label_insert()
695 __proxy_share(this, label); in __label_insert()
696 AA_BUG(!__label_replace(this, label)); in __label_insert()
697 return aa_get_label(label); in __label_insert()
705 rb_link_node(&label->node, parent, new); in __label_insert()
706 rb_insert_color(&label->node, &ls->root); in __label_insert()
707 label->flags |= FLAG_IN_TREE; in __label_insert()
709 return aa_get_label(label); in __label_insert()
759 static struct aa_label *__label_find(struct aa_label *label) in __label_find() argument
761 AA_BUG(!label); in __label_find()
763 return __vec_find(label->vec, label->size); in __label_find()
774 bool aa_label_remove(struct aa_label *label) in aa_label_remove() argument
776 struct aa_labelset *ls = labels_set(label); in aa_label_remove()
783 res = __label_remove(label, ns_unconfined(labels_ns(label))); in aa_label_remove()
841 struct aa_label *label; in vec_find() local
850 label = __vec_find(vec, n); in vec_find()
853 return label; in vec_find()
860 struct aa_label *label = NULL; in vec_create_and_insert_label() local
869 return aa_get_label(&vec[0]->label); in vec_create_and_insert_label()
871 ls = labels_set(&vec[len - 1]->label); in vec_create_and_insert_label()
884 label = __label_insert(ls, new, false); in vec_create_and_insert_label()
886 label_free_or_put_new(label, new); in vec_create_and_insert_label()
888 return label; in vec_create_and_insert_label()
894 struct aa_label *label = vec_find(vec, len); in aa_vec_find_or_create_label() local
896 if (label) in aa_vec_find_or_create_label()
897 return label; in aa_vec_find_or_create_label()
912 struct aa_label *aa_label_find(struct aa_label *label) in aa_label_find() argument
914 AA_BUG(!label); in aa_label_find()
916 return vec_find(label->vec, label->size); in aa_label_find()
930 struct aa_label *aa_label_insert(struct aa_labelset *ls, struct aa_label *label) in aa_label_insert() argument
936 AA_BUG(!label); in aa_label_insert()
939 if (!label_is_stale(label)) { in aa_label_insert()
941 l = __label_find(label); in aa_label_insert()
948 l = __label_insert(ls, label, false); in aa_label_insert()
1055 struct aa_label *label; in label_merge_insert() local
1074 AA_BUG(!new->vec[k]->label.proxy); in label_merge_insert()
1075 AA_BUG(!new->vec[k]->label.proxy->label); in label_merge_insert()
1076 if (next->label.proxy != new->vec[k]->label.proxy) in label_merge_insert()
1092 label = aa_get_label(&new->vec[0]->label); in label_merge_insert()
1093 return label; in label_merge_insert()
1108 label = __label_insert(labels_set(new), new, false); in label_merge_insert()
1111 return label; in label_merge_insert()
1187 struct aa_label *label, *ar = NULL, *br = NULL; in aa_label_find_merge() local
1199 label = __label_find_merge(ls, a, b); in aa_label_find_merge()
1204 return label; in aa_label_find_merge()
1223 struct aa_label *label = NULL; in aa_label_merge() local
1237 if (!label) { in aa_label_merge()
1250 label = label_merge_insert(new, a, b); in aa_label_merge()
1251 label_free_or_put_new(label, new); in aa_label_merge()
1257 return label; in aa_label_merge()
1301 struct aa_label *label, in label_compound_match() argument
1309 label_for_each(i, label, tp) { in label_compound_match()
1323 label_for_each_cont(i, label, tp) { in label_compound_match()
1361 struct aa_label *label, aa_state_t start, in label_components_match() argument
1371 label_for_each(i, label, tp) { in label_components_match()
1387 label_for_each_cont(i, label, tp) { in label_components_match()
1421 struct aa_label *label, aa_state_t state, bool subns, in aa_label_match() argument
1424 int error = label_compound_match(profile, rules, label, state, subns, in aa_label_match()
1430 return label_components_match(profile, rules, label, state, subns, in aa_label_match()
1446 bool aa_update_label_name(struct aa_ns *ns, struct aa_label *label, gfp_t gfp) in aa_update_label_name() argument
1454 AA_BUG(!label); in aa_update_label_name()
1456 if (label->hname || labels_ns(label) != ns) in aa_update_label_name()
1459 if (aa_label_acntsxprint(&name, ns, label, FLAGS_NONE, gfp) < 0) in aa_update_label_name()
1462 ls = labels_set(label); in aa_update_label_name()
1464 if (!label->hname && label->flags & FLAG_IN_TREE) { in aa_update_label_name()
1465 label->hname = name; in aa_update_label_name()
1478 static inline bool use_label_hname(struct aa_ns *ns, struct aa_label *label, in use_label_hname() argument
1481 if (label->hname && (!ns || labels_ns(label) == ns) && in use_label_hname()
1555 static const char *label_modename(struct aa_ns *ns, struct aa_label *label, in label_modename() argument
1562 label_for_each(i, label, profile) { in label_modename()
1588 static inline bool display_mode(struct aa_ns *ns, struct aa_label *label, in display_mode() argument
1595 label_for_each(i, label, profile) { in display_mode()
1626 struct aa_label *label, int flags) in aa_label_snxprint() argument
1635 AA_BUG(!label); in aa_label_snxprint()
1642 ns = labels_ns(label); in aa_label_snxprint()
1645 label_for_each(i, label, profile) { in aa_label_snxprint()
1668 if (display_mode(ns, label, flags)) { in aa_label_snxprint()
1670 label_modename(ns, label, flags)); in aa_label_snxprint()
1689 int aa_label_asxprint(char **strp, struct aa_ns *ns, struct aa_label *label, in aa_label_asxprint() argument
1695 AA_BUG(!label); in aa_label_asxprint()
1697 size = aa_label_snxprint(NULL, 0, ns, label, flags); in aa_label_asxprint()
1704 return aa_label_snxprint(*strp, size + 1, ns, label, flags); in aa_label_asxprint()
1719 struct aa_label *label, int flags, gfp_t gfp) in aa_label_acntsxprint() argument
1724 AA_BUG(!label); in aa_label_acntsxprint()
1726 size = aa_label_snxprint(NULL, 0, ns, label, flags); in aa_label_acntsxprint()
1733 return aa_label_snxprint(*strp, size + 1, ns, label, flags); in aa_label_acntsxprint()
1738 struct aa_label *label, int flags, gfp_t gfp) in aa_label_xaudit() argument
1745 AA_BUG(!label); in aa_label_xaudit()
1747 if (!use_label_hname(ns, label, flags) || in aa_label_xaudit()
1748 display_mode(ns, label, flags)) { in aa_label_xaudit()
1749 len = aa_label_asxprint(&name, ns, label, flags, gfp); in aa_label_xaudit()
1756 str = (char *) label->hname; in aa_label_xaudit()
1768 struct aa_label *label, int flags, gfp_t gfp) in aa_label_seq_xprint() argument
1771 AA_BUG(!label); in aa_label_seq_xprint()
1773 if (!use_label_hname(ns, label, flags)) { in aa_label_seq_xprint()
1777 len = aa_label_asxprint(&str, ns, label, flags, gfp); in aa_label_seq_xprint()
1784 } else if (display_mode(ns, label, flags)) in aa_label_seq_xprint()
1785 seq_printf(f, "%s (%s)", label->hname, in aa_label_seq_xprint()
1786 label_modename(ns, label, flags)); in aa_label_seq_xprint()
1788 seq_puts(f, label->hname); in aa_label_seq_xprint()
1791 void aa_label_xprintk(struct aa_ns *ns, struct aa_label *label, int flags, in aa_label_xprintk() argument
1794 AA_BUG(!label); in aa_label_xprintk()
1796 if (!use_label_hname(ns, label, flags)) { in aa_label_xprintk()
1800 len = aa_label_asxprint(&str, ns, label, flags, gfp); in aa_label_xprintk()
1807 } else if (display_mode(ns, label, flags)) in aa_label_xprintk()
1808 pr_info("%s (%s)", label->hname, in aa_label_xprintk()
1809 label_modename(ns, label, flags)); in aa_label_xprintk()
1811 pr_info("%s", label->hname); in aa_label_xprintk()
1814 void aa_label_audit(struct audit_buffer *ab, struct aa_label *label, gfp_t gfp) in aa_label_audit() argument
1818 aa_label_xaudit(ab, ns, label, FLAG_VIEW_SUBNS, gfp); in aa_label_audit()
1822 void aa_label_seq_print(struct seq_file *f, struct aa_label *label, gfp_t gfp) in aa_label_seq_print() argument
1826 aa_label_seq_xprint(f, ns, label, FLAG_VIEW_SUBNS, gfp); in aa_label_seq_print()
1830 void aa_label_printk(struct aa_label *label, gfp_t gfp) in aa_label_printk() argument
1834 aa_label_xprintk(ns, label, FLAG_VIEW_SUBNS, gfp); in aa_label_printk()
1892 struct aa_label *label, *currbase = base; in aa_label_strn_parse() local
1902 base != &root_ns->unconfined->label)) in aa_label_strn_parse()
1931 currbase = &vec[i]->label; in aa_label_strn_parse()
1943 return &vec[0]->label; in aa_label_strn_parse()
1948 label = aa_get_label(&vec[0]->label); in aa_label_strn_parse()
1953 label = aa_vec_find_or_create_label(vec, len, gfp); in aa_label_strn_parse()
1955 label = vec_find(vec, len); in aa_label_strn_parse()
1956 if (!label) in aa_label_strn_parse()
1962 return label; in aa_label_strn_parse()
1965 label = ERR_PTR(-ENOENT); in aa_label_strn_parse()
2016 struct aa_label *label; in labelset_next_stale() local
2025 label = rb_entry(node, struct aa_label, node); in labelset_next_stale()
2026 if ((label_is_stale(label) || in labelset_next_stale()
2027 vec_is_stale(label->vec, label->size)) && in labelset_next_stale()
2028 __aa_get_label(label)) in labelset_next_stale()
2032 label = NULL; in labelset_next_stale()
2037 return label; in labelset_next_stale()
2052 static struct aa_label *__label_update(struct aa_label *label) in __label_update() argument
2059 AA_BUG(!label); in __label_update()
2060 AA_BUG(!mutex_is_locked(&labels_ns(label)->lock)); in __label_update()
2062 new = aa_label_alloc(label->size, label->proxy, GFP_KERNEL); in __label_update()
2070 ls = labels_set(label); in __label_update()
2072 for (i = 0; i < label->size; i++) { in __label_update()
2073 AA_BUG(!label->vec[i]); in __label_update()
2074 new->vec[i] = aa_get_newest_profile(label->vec[i]); in __label_update()
2076 AA_BUG(!new->vec[i]->label.proxy); in __label_update()
2077 AA_BUG(!new->vec[i]->label.proxy->label); in __label_update()
2078 if (new->vec[i]->label.proxy != label->vec[i]->label.proxy) in __label_update()
2088 tmp = aa_get_label(&new->vec[0]->label); in __label_update()
2089 AA_BUG(tmp == label); in __label_update()
2092 if (labels_set(label) != labels_set(new)) { in __label_update()
2099 AA_BUG(labels_ns(label) != labels_ns(new)); in __label_update()
2101 tmp = __label_insert(labels_set(label), new, true); in __label_update()
2104 __label_remove(label, tmp); in __label_update()
2126 struct aa_label *label; in __labelset_update() local
2132 label = labelset_next_stale(&ns->labels); in __labelset_update()
2133 if (label) { in __labelset_update()
2134 struct aa_label *l = __label_update(label); in __labelset_update()
2137 aa_put_label(label); in __labelset_update()
2139 } while (label); in __labelset_update()