68     struct kadm5_auth_restrictions *rs;  member
173     struct kadm5_auth_restrictions *rs;  in parse_restrictions()  local
179     rs = calloc(1, sizeof(*rs));  in parse_restrictions()
180     if (rs == NULL) {  in parse_restrictions()
185     rs->forbid_attrs = ~(krb5_flags)0;  in parse_restrictions()
189         if (krb5_flagspec_to_mask(token, &rs->require_attrs,  in parse_restrictions()
190                                   &rs->forbid_attrs) == 0) {  in parse_restrictions()
191             rs->mask |= KADM5_ATTRIBUTES;  in parse_restrictions()
196             rs->mask |= KADM5_POLICY_CLR;  in parse_restrictions()
206             if (rs->policy != NULL)  in parse_restrictions()
208             rs->policy = strdup(arg);  in parse_restrictions()
209             if (rs->policy == NULL)  in parse_restrictions()
211             rs->mask |= KADM5_POLICY;  in parse_restrictions()
220             rs->princ_lifetime = delta;  in parse_restrictions()
221             rs->mask |= KADM5_PRINC_EXPIRE_TIME;  in parse_restrictions()
223             rs->pw_lifetime = delta;  in parse_restrictions()
224             rs->mask |= KADM5_PW_EXPIRATION;  in parse_restrictions()
226             rs->max_life = delta;  in parse_restrictions()
227             rs->mask |= KADM5_MAX_LIFE;  in parse_restrictions()
229             rs->max_renewable_life = delta;  in parse_restrictions()
230             rs->mask |= KADM5_MAX_RLIFE;  in parse_restrictions()
237     return rs;  in parse_restrictions()
242     free(rs->policy);  in parse_restrictions()
243     free(rs);  in parse_restrictions()
252     if (entry->rs != NULL) {  in free_acl_entry()
253         free(entry->rs->policy);  in free_acl_entry()
254         free(entry->rs);  in free_acl_entry()
263             const char *target, const char *rs, const char *line,  in parse_entry()  argument
310     if (rs != NULL) {  in parse_entry()
311         entry->rs = parse_restrictions(rs, fname);  in parse_entry()
312         if (entry->rs == NULL)  in parse_entry()
329     char *client, *client_end, *ops, *ops_end, *target, *target_end, *rs, *end;  in parse_line()  local
355     rs = target_end + strspn(target_end, ws);  in parse_line()
364     if (*rs == '\0')  in parse_line()
365         rs = NULL;  in parse_line()
367         entry = parse_entry(context, client, ops, target, rs, line, fname);  in parse_line()
540     if (rs_out != NULL && entry->rs != NULL && entry->rs->mask)  in acl_check()
541         *rs_out = entry->rs;  in acl_check()
642     struct kadm5_auth_restrictions *rs;  in acl_renprinc()  local
645         acl_check(data, ACL_ADD, client, dest, &rs) == 0 && rs == NULL)  in acl_renprinc()
728     struct kadm5_auth_restrictions *rs;  in acl_addalias()  local
730     if (acl_check(data, ACL_ADD, client, alias, &rs) == 0 && rs == NULL &&  in acl_addalias()
731         acl_check(data, ACL_MODIFY, client, target, &rs) == 0)  in acl_addalias()