Lines Matching refs:rules
72 struct aa_ruleset *rules = profile->label.rules[0]; in audit_caps() local
81 !cap_raised(rules->caps.audit, cap))) in audit_caps()
85 cap_raised(rules->caps.kill, cap)) { in audit_caps()
87 } else if (cap_raised(rules->caps.quiet, cap) && in audit_caps()
124 struct aa_ruleset *rules = profile->label.rules[0]; in profile_capable() local
128 state = RULE_MEDIATES(rules, ad->class); in profile_capable()
134 state = aa_dfa_next(rules->policy->dfa, state, cap >> 5); in profile_capable()
136 perms = *aa_lookup_perms(rules->policy, state); in profile_capable()
150 if (cap_raised(rules->caps.allow, cap) && in profile_capable()
151 !cap_raised(rules->caps.denied, cap)) in profile_capable()
196 struct aa_ruleset *rules = profile->label.rules[0]; in aa_profile_capget() local
199 state = RULE_MEDIATES(rules, AA_CLASS_CAP); in aa_profile_capget()
209 tmp = aa_dfa_next(rules->policy->dfa, state, i); in aa_profile_capget()
210 perms = *aa_lookup_perms(rules->policy, tmp); in aa_profile_capget()
222 return rules->caps.allow; in aa_profile_capget()