Lines Matching defs:profile
82 * @profile: the profile being enforced (NOT NULL)
96 struct aa_profile *profile, struct aa_perms *perms,
118 if (unlikely(AUDIT_MODE(profile) == AUDIT_ALL))
137 AUDIT_MODE(profile) != AUDIT_NOQUIET &&
138 AUDIT_MODE(profile) != AUDIT_ALL)
146 return aa_audit(type, profile, &ad, file_audit_cb);
154 struct aa_profile *profile;
165 fn_for_each_confined(label, profile,
167 profile, &nullperms, op, request, *name,
227 struct aa_profile *profile, const char *name,
231 struct aa_ruleset *rules = profile->label.rules[0];
234 if (profile_unconfined(profile) ||
242 profile, perms, op, request, name, NULL, NULL,
248 struct aa_profile *profile,
256 if (profile_unconfined(profile))
259 error = path_name(op, subj_cred, &profile->label, path,
260 flags | profile->path_flags, buffer, &name, cond,
264 return __aa_path_perm(op, subj_cred, profile, name, request, cond,
272 * @label: profile being enforced (NOT NULL)
274 * @flags: any additional path flags beyond what the profile specifies
286 struct aa_profile *profile;
295 error = fn_for_each_confined(label, profile,
296 profile_path_perm(op, subj_cred, profile, path, buffer,
325 struct aa_profile *profile,
330 struct aa_ruleset *rules = profile->label.rules[0];
338 error = path_name(OP_LINK, subj_cred, &profile->label, link,
339 profile->path_flags,
345 error = path_name(OP_LINK, subj_cred, &profile->label, target,
346 profile->path_flags,
407 profile, &lperms, OP_LINK, request, lname, tname,
443 struct aa_profile *profile;
453 error = fn_for_each_confined(label, profile,
454 profile_path_link(subj_cred, profile, &link, buffer,
488 struct aa_profile *profile;
509 /* check every profile in task label not in current cache */
510 error = fn_for_each_not_in_set(flabel, label, profile,
511 profile_path_perm(op, subj_cred, profile,
516 * check every profile in file label that was not tested
524 error = fn_for_each(label, profile,
526 profile, &file->f_path,
530 error = fn_for_each_not_in_set(label, flabel, profile,
532 profile, &file->f_path,
559 /* check every profile in file label to is cached */