Lines Matching defs:permitted

198  * Determine whether the nominated task is permitted to trace the current
225  * @permitted: The place to record the permitted set
231 	       kernel_cap_t *inheritable, kernel_cap_t *permitted)
240 	*permitted   = cred->cap_permitted;
247  * permitted set.  Returns 1 if they are limited, 0 if they are not.
266  * @permitted: A pointer to the proposed new permitted capabilities set
276 	       const kernel_cap_t *permitted)
292 	if (!cap_issubset(*permitted, old->cap_permitted))
296 	if (!cap_issubset(*effective, *permitted))
301 	new->cap_permitted   = *permitted;
304 	 * Mask off ambient bits that are no longer both permitted and
308 					 cap_intersect(*permitted,
635 		(new->cap_bset.val & caps->permitted.val) |
638 	if (caps->permitted.val & ~new->cap_permitted.val)
645 	 * missing some "forced" (aka file-permitted) capabilities.
728 	cpu_caps->permitted.val = le32_to_cpu(caps->data[0].permitted);
736 		cpu_caps->permitted.val += (u64)le32_to_cpu(caps->data[1].permitted) << 32;
740 	cpu_caps->permitted.val &= CAP_VALID_MASK;
896 	       __cap_gained(permitted, new, old)) ||
936 	if (__cap_gained(permitted, new, old))
946 	if ((is_setid || __cap_gained(permitted, new, old)) &&
999 	      __cap_grew(permitted, ambient, new))))
1086  * cap_emulate_setxuid() fixes the effective / permitted capabilities of
1090  *  {r,e,s}uid != 0, the permitted and effective capabilities are
1097  *  capabilities are set to the permitted capabilities.
1106  * calls setuid() and switches away from uid==0. Both permitted and
1217  * cap_task_setscheduler - Determine if scheduler policy change is permitted
1220  * Determine if the requested scheduler policy change is permitted for the
1231  * cap_task_setioprio - Determine if I/O priority change is permitted
1235  * Determine if the requested I/O priority change is permitted for the specified
1246  * cap_task_setnice - Determine if task priority change is permitted
1250  * Determine if the requested task priority change is permitted for the
1438  * cap_vm_enough_memory - Determine whether a new virtual mapping is permitted
1443  * task is permitted.