38 	short access;  member
118 		walk->access |= ex->access;  in dev_exception_add()
146 		walk->access &= ~ex->access;  in dev_exception_rm()
147 		if (!walk->access) {  in dev_exception_rm()
250 static void set_access(char *acc, short access)  in set_access()  argument
254 	if (access & DEVCG_ACC_READ)  in set_access()
256 	if (access & DEVCG_ACC_WRITE)  in set_access()
258 	if (access & DEVCG_ACC_MKNOD)  in set_access()
302 			set_access(acc, ex->access);  in devcgroup_seq_show()
320  * @access: permission mask (DEVCG_ACC_READ, DEVCG_ACC_WRITE, DEVCG_ACC_MKNOD)
328 			    u32 major, u32 minor, short access)  in match_exception()  argument
341 		/* provided access cannot have more than the exception rule */  in match_exception()
342 		if (access & (~ex->access))  in match_exception()
355  * @access: permission mask (DEVCG_ACC_READ, DEVCG_ACC_WRITE, DEVCG_ACC_MKNOD)
359  * used to make sure no extra access is being granted that is forbidden by
365 				    u32 major, u32 minor, short access)  in match_exception_partial()  argument
385 		 * an exception, all its access bits shouldn't match the  in match_exception_partial()
386 		 * exception's access bits  in match_exception_partial()
388 		if (!(access & ex->access))  in match_exception_partial()
431 							refex->access);  in verify_new_ex()
440 		 * the new exception will add access to more devices and must  in verify_new_ex()
446 					refex->access);  in verify_new_ex()
478  * be checked if removing it will give the child cgroup more access than the
491 	/* It's always allowed to remove access to devices */  in parent_allows_removal()
500 					ex->major, ex->minor, ex->access);  in parent_allows_removal()
562 		 * methods), and online ones are safe to access outside RCU  in propagate_exception()
607  * new access is only allowed if you're in the top-level cgroup, or your
608  * parent cgroup has the access you're asking for.
726 			ex.access |= DEVCG_ACC_READ;  in devcgroup_update_access()
729 			ex.access |= DEVCG_ACC_WRITE;  in devcgroup_update_access()
732 			ex.access |= DEVCG_ACC_MKNOD;  in devcgroup_update_access()
828  * @access: combination of DEVCG_ACC_WRITE, DEVCG_ACC_READ and DEVCG_ACC_MKNOD
833 					short access)  in devcgroup_legacy_check_permission()  argument
843 					      type, major, minor, access);  in devcgroup_legacy_check_permission()
847 				     minor, access);  in devcgroup_legacy_check_permission()
860 int devcgroup_check_permission(short type, u32 major, u32 minor, short access)  in devcgroup_check_permission()  argument
862 	int rc = BPF_CGROUP_RUN_PROG_DEVICE_CGROUP(type, major, minor, access);  in devcgroup_check_permission()
868 	return devcgroup_legacy_check_permission(type, major, minor, access);  in devcgroup_check_permission()