Lines Matching refs:perms
139 struct aa_perms *perms, const char *info, int error) in audit_mount() argument
145 u32 mask = perms->audit; in audit_mount()
158 request = request & ~perms->allow; in audit_mount()
160 if (request & perms->kill) in audit_mount()
164 if ((request & perms->quiet) && in audit_mount()
167 request &= ~perms->quiet; in audit_mount()
179 if (data && (perms->audit & AA_AUDIT_DATA)) in audit_mount()
229 void *data, bool binary, struct aa_perms *perms) in do_match_mnt() argument
235 AA_BUG(!policy->perms); in do_match_mnt()
236 AA_BUG(!perms); in do_match_mnt()
258 *perms = *aa_lookup_perms(policy, state); in do_match_mnt()
259 if (perms->allow & AA_MAY_MOUNT) in do_match_mnt()
263 if (data && !binary && (perms->allow & AA_MNT_CONT_MATCH)) { in do_match_mnt()
271 *perms = *aa_lookup_perms(policy, state); in do_match_mnt()
272 if (perms->allow & AA_MAY_MOUNT) in do_match_mnt()
312 struct aa_perms perms = { }; in match_mnt_path_str() local
339 mntpnt, devname, type, flags, data, binary, &perms); in match_mnt_path_str()
349 flags, data, AA_MAY_MOUNT, &perms, info, error); in match_mnt_path_str()
609 struct aa_perms perms = { }; in profile_umount() local
628 perms = *aa_lookup_perms(rules->policy, state); in profile_umount()
629 if (AA_MAY_UMOUNT & ~perms.allow) in profile_umount()
635 AA_MAY_UMOUNT, &perms, info, error); in profile_umount()
675 struct aa_perms perms = { }; in build_pivotroot() local
704 perms = *aa_lookup_perms(rules->policy, state); in build_pivotroot()
706 if (AA_MAY_PIVOTROOT & perms.allow) in build_pivotroot()
713 &perms, info, error); in build_pivotroot()