Lines Matching refs:avd
51 struct av_decision avd; member
378 struct av_decision *avd, in avc_xperms_audit_required() argument
386 denied = requested & ~avd->allowed; in avc_xperms_audit_required()
388 audited = denied & avd->auditdeny; in avc_xperms_audit_required()
396 audited = requested & avd->auditallow; in avc_xperms_audit_required()
408 u32 requested, struct av_decision *avd, in avc_xperms_audit() argument
416 requested, avd, xpd, perm, result, &denied); in avc_xperms_audit()
507 …d avc_node_populate(struct avc_node *node, u32 ssid, u32 tsid, u16 tclass, struct av_decision *avd) in avc_node_populate() argument
512 memcpy(&node->ae.avd, avd, sizeof(node->ae.avd)); in avc_node_populate()
601 struct av_decision *avd, struct avc_xperms_node *xp_node) in avc_insert() argument
609 if (avc_latest_notif_update(avd->seqno, 1)) in avc_insert()
616 avc_node_populate(node, ssid, tsid, tclass, avd); in avc_insert()
853 seqno == pos->ae.avd.seqno){ in avc_update_node()
869 avc_node_populate(node, ssid, tsid, tclass, &orig->ae.avd); in avc_update_node()
881 node->ae.avd.allowed |= perms; in avc_update_node()
887 node->ae.avd.allowed &= ~perms; in avc_update_node()
890 node->ae.avd.auditallow |= perms; in avc_update_node()
893 node->ae.avd.auditallow &= ~perms; in avc_update_node()
896 node->ae.avd.auditdeny |= perms; in avc_update_node()
899 node->ae.avd.auditdeny &= ~perms; in avc_update_node()
982 struct av_decision *avd, in avc_compute_av() argument
986 security_compute_av(ssid, tsid, tclass, avd, &xp_node->xp); in avc_compute_av()
987 avc_insert(ssid, tsid, tclass, avd, xp_node); in avc_compute_av()
993 struct av_decision *avd) in avc_denied() argument
999 !(avd->flags & AVD_FLAGS_PERMISSIVE)) in avc_denied()
1003 xperm, ssid, tsid, tclass, avd->seqno, NULL, flags); in avc_denied()
1018 struct av_decision avd; in avc_has_extended_perms() local
1037 avc_compute_av(ssid, tsid, tclass, &avd, xp_node); in avc_has_extended_perms()
1039 memcpy(&avd, &node->ae.avd, sizeof(avd)); in avc_has_extended_perms()
1057 avd.allowed &= ~requested; in avc_has_extended_perms()
1065 driver, xperm, ssid, tsid, tclass, avd.seqno, in avc_has_extended_perms()
1073 avd.allowed &= ~requested; in avc_has_extended_perms()
1076 denied = requested & ~(avd.allowed); in avc_has_extended_perms()
1079 driver, xperm, AVC_EXTENDED_PERMS, &avd); in avc_has_extended_perms()
1084 &avd, xpd, xperm, rc, ad); in avc_has_extended_perms()
1105 struct av_decision *avd) in avc_perm_nonode() argument
1110 avc_compute_av(ssid, tsid, tclass, avd, &xp_node); in avc_perm_nonode()
1111 denied = requested & ~(avd->allowed); in avc_perm_nonode()
1114 flags, avd); in avc_perm_nonode()
1141 struct av_decision *avd) in avc_has_perm_noaudit() argument
1154 flags, avd); in avc_has_perm_noaudit()
1156 denied = requested & ~node->ae.avd.allowed; in avc_has_perm_noaudit()
1157 memcpy(avd, &node->ae.avd, sizeof(*avd)); in avc_has_perm_noaudit()
1162 flags, avd); in avc_has_perm_noaudit()
1185 struct av_decision avd; in avc_has_perm() local
1189 &avd); in avc_has_perm()
1191 rc2 = avc_audit(ssid, tsid, tclass, requested, &avd, rc, in avc_has_perm()