Lines Matching refs:ruleset
120 struct landlock_ruleset *ruleset = filp->private_data; in fop_ruleset_release() local
122 landlock_put_ruleset(ruleset); in fop_ruleset_release()
184 struct landlock_ruleset *ruleset; in SYSCALL_DEFINE3() local
223 ruleset = landlock_create_ruleset(ruleset_attr.handled_access_fs, in SYSCALL_DEFINE3()
226 if (IS_ERR(ruleset)) in SYSCALL_DEFINE3()
227 return PTR_ERR(ruleset); in SYSCALL_DEFINE3()
231 ruleset, O_RDWR | O_CLOEXEC); in SYSCALL_DEFINE3()
233 landlock_put_ruleset(ruleset); in SYSCALL_DEFINE3()
245 struct landlock_ruleset *ruleset; in get_ruleset_from_fd() local
253 ruleset = ERR_PTR(-EBADFD); in get_ruleset_from_fd()
257 ruleset = ERR_PTR(-EPERM); in get_ruleset_from_fd()
260 ruleset = fd_file(ruleset_f)->private_data; in get_ruleset_from_fd()
261 if (WARN_ON_ONCE(ruleset->num_layers != 1)) { in get_ruleset_from_fd()
262 ruleset = ERR_PTR(-EINVAL); in get_ruleset_from_fd()
265 landlock_get_ruleset(ruleset); in get_ruleset_from_fd()
269 return ruleset; in get_ruleset_from_fd()
310 static int add_rule_path_beneath(struct landlock_ruleset *const ruleset, in add_rule_path_beneath() argument
332 mask = ruleset->access_masks[0].fs; in add_rule_path_beneath()
342 err = landlock_append_fs_rule(ruleset, &path, in add_rule_path_beneath()
348 static int add_rule_net_port(struct landlock_ruleset *ruleset, in add_rule_net_port() argument
368 mask = landlock_get_net_access_mask(ruleset, 0); in add_rule_net_port()
377 return landlock_append_net_rule(ruleset, net_port_attr.port, in add_rule_net_port()
418 struct landlock_ruleset *ruleset; in SYSCALL_DEFINE4() local
429 ruleset = get_ruleset_from_fd(ruleset_fd, FMODE_CAN_WRITE); in SYSCALL_DEFINE4()
430 if (IS_ERR(ruleset)) in SYSCALL_DEFINE4()
431 return PTR_ERR(ruleset); in SYSCALL_DEFINE4()
435 err = add_rule_path_beneath(ruleset, rule_attr); in SYSCALL_DEFINE4()
438 err = add_rule_net_port(ruleset, rule_attr); in SYSCALL_DEFINE4()
444 landlock_put_ruleset(ruleset); in SYSCALL_DEFINE4()
476 struct landlock_ruleset *new_dom, *ruleset; in SYSCALL_DEFINE2() local
497 ruleset = get_ruleset_from_fd(ruleset_fd, FMODE_CAN_READ); in SYSCALL_DEFINE2()
498 if (IS_ERR(ruleset)) in SYSCALL_DEFINE2()
499 return PTR_ERR(ruleset); in SYSCALL_DEFINE2()
513 new_dom = landlock_merge_ruleset(new_llcred->domain, ruleset); in SYSCALL_DEFINE2()
523 landlock_put_ruleset(ruleset); in SYSCALL_DEFINE2()
530 landlock_put_ruleset(ruleset); in SYSCALL_DEFINE2()