Lines Matching full:rules
74 APPARMOR_ENFORCE, /* enforce access rules */
157 /* struct aa_ruleset - data covering mediation rules
160 * @policy: general match rules governing policy
161 * @file: The set of rules governing basic file access and domain transitions
182 /* struct aa_attachment - data and rules for a profiles attachment
209 * @attach: attachment rules for the profile
210 * @rules: rules to be enforced
220 * @rules - label with the rule vec on its end
225 * attachments are determined by profile X transition rules.
304 static inline aa_state_t RULE_MEDIATES(struct aa_ruleset *rules, in RULE_MEDIATES() argument
308 return rules->policy->start[class]; in RULE_MEDIATES()
310 return aa_dfa_match_len(rules->policy->dfa, in RULE_MEDIATES()
311 rules->policy->start[0], &class, 1); in RULE_MEDIATES()
314 static inline aa_state_t RULE_MEDIATES_v9NET(struct aa_ruleset *rules) in RULE_MEDIATES_v9NET() argument
316 return RULE_MEDIATES(rules, AA_CLASS_NETV9); in RULE_MEDIATES_v9NET()
319 static inline aa_state_t RULE_MEDIATES_NET(struct aa_ruleset *rules) in RULE_MEDIATES_NET() argument
325 aa_state_t state = RULE_MEDIATES(rules, AA_CLASS_NETV9); in RULE_MEDIATES_NET()
329 state = RULE_MEDIATES(rules, AA_CLASS_NET); in RULE_MEDIATES_NET()