Lines Matching full:domain

3  * Landlock - Domain management
38 * A domain aborted by a thread-sync failure already emitted its
49 * struct landlock_details - Domain's creation information
51 * Rarely accessed, mainly when logging the first domain's denial.
53 * The contained pointers are initialized at the domain creation time and never
88 * struct landlock_hierarchy - Node in a domain hierarchy
93 * Landlock domain.
98 * domain.
104 * @log_status: Whether this domain should be logged or not. Because
106 * possible to have several domain records of the same domain.
110 * @num_denials: Number of access requests denied by this domain.
115 * @id: Landlock domain ID, set once at domain creation time.
119 * @details: Information about the related domain.
123 * @log_same_exec: Set if the domain is *not* configured with
128 * @log_new_exec: Set if the domain is configured with
198 * struct landlock_domain - Immutable Landlock domain
200 * A domain is created from a ruleset by landlock_merge_ruleset() and enforced
202 * &struct landlock_ruleset, a domain has no lock field.
211 * domain vanishes. This is needed for the ptrace and scope
217 * @work_free: Enables to free a domain within a lockless
226 * domain.
231 * domain. This enables to check that all the layers
237 * network actions that are restricted by a domain. A
238 * domain saves all layers of merged rulesets in a stack
244 * and never changed for the lifetime of the domain.
258 landlock_get_fs_access_mask(const struct landlock_domain *const domain,
262 return domain->handled_masks[layer_level].fs |
267 landlock_get_net_access_mask(const struct landlock_domain *const domain,
270 return domain->handled_masks[layer_level].net;
274 landlock_get_scope_mask(const struct landlock_domain *const domain,
277 return domain->handled_masks[layer_level].scope;
282 * domain
284 * @domain: Landlock domain
286 * Return: An access_masks result of the OR of all the domain's access masks.
289 landlock_union_access_masks(const struct landlock_domain *const domain)
294 for (layer_level = 0; layer_level < domain->num_layers; layer_level++) {
296 .masks = domain->handled_masks[layer_level],
305 void landlock_put_domain(struct landlock_domain *const domain);
306 void landlock_put_domain_deferred(struct landlock_domain *const domain);
315 bool landlock_unmask_layers(const struct landlock_domain *const domain,
321 landlock_init_layer_masks(const struct landlock_domain *const domain,
326 static inline void landlock_get_domain(struct landlock_domain *const domain)
328 if (domain)
329 refcount_inc(&domain->usage);