133  * (per-layer) unfulfilled access rights @masks so that all the access rights
138  * @masks: A matrix of unfulfilled access rights for each layer.
163 	 * An access is granted if, for each policy layer, at least one rule  in landlock_unmask_layers()
165 	 * of its position in the layer stack.  We must then check the remaining  in landlock_unmask_layers()
166 	 * layers for each inode, from the first added layer to the last one.  in landlock_unmask_layers()
167 	 * When there are multiple requested accesses, for each policy layer,  in landlock_unmask_layers()
174 	 * is per-layer: access is granted iff masks->layers[l].access == 0 for  in landlock_unmask_layers()
176 	 * within a layer (e.g. a path rule OR a scope exception), the  in landlock_unmask_layers()
177 	 * composition must evaluate per-layer: FOR-ALL l (A(l) OR B(l)), not  in landlock_unmask_layers()
182 		const struct landlock_layer *const layer = &rule->layers[i];  in landlock_unmask_layers()  local
184 		/* Clear the bits where the layer in the rule grants access. */  in landlock_unmask_layers()
185 		masks->layers[layer->level - 1].access &= ~layer->access;  in landlock_unmask_layers()
188 		/* Collect rule flags for each layer. */  in landlock_unmask_layers()
189 		if (layer->flags.quiet)  in landlock_unmask_layers()
190 			masks->layers[layer->level - 1].quiet = true;  in landlock_unmask_layers()
206  * landlock_init_layer_masks - Initialize layer masks from an access request
214  * @masks: Layer access masks to populate.
327 	/* Stacks the new layer. */  in merge_ruleset()
405 	 * Copies the parent layer stack and leaves a space for the new layer.  in inherit_ruleset()
607 		    const unsigned long access_bit, const size_t layer)  in get_layer_deny_mask()  argument
615 	if (WARN_ON_ONCE(layer >= LANDLOCK_MAX_NUM_LAYERS))  in get_layer_deny_mask()
623 	return layer  in get_layer_deny_mask()
632  * @deny_masks: Domain layer levels that denied each optional access (the
653 		const u8 layer =  in landlock_get_quiet_optional_accesses()  local
658 		if (masks->layers[layer].quiet)  in landlock_get_quiet_optional_accesses()