32 static struct landlock_ruleset *create_ruleset(const u32 num_layers)  in create_ruleset()  argument
37 		kzalloc(struct_size(new_ruleset, access_masks, num_layers),  in create_ruleset()
49 	new_ruleset->num_layers = num_layers;  in create_ruleset()
83 		.num_layers = ~0,  in build_check_rule()
86 	BUILD_BUG_ON(rule.num_layers < LANDLOCK_MAX_NUM_LAYERS);  in build_check_rule()
108 	    const struct landlock_layer (*const layers)[], const u32 num_layers,  in create_rule()  argument
117 		if (WARN_ON_ONCE(num_layers >= LANDLOCK_MAX_NUM_LAYERS))  in create_rule()
119 		new_num_layers = num_layers + 1;  in create_rule()
121 		new_num_layers = num_layers;  in create_rule()
135 	new_rule->num_layers = new_num_layers;  in create_rule()
138 	       flex_array_size(new_rule, layers, num_layers));  in create_rule()
141 		new_rule->layers[new_rule->num_layers - 1] = *new_layer;  in create_rule()
178 		.num_layers = ~0,  in build_check_ruleset()
182 	BUILD_BUG_ON(ruleset.num_layers < LANDLOCK_MAX_NUM_LAYERS);  in build_check_ruleset()
206 		       const size_t num_layers)  in insert_rule()  argument
240 		if (WARN_ON_ONCE(num_layers != 1))  in insert_rule()
249 			if (WARN_ON_ONCE(this->num_layers != 1))  in insert_rule()
264 		new_rule = create_rule(id, &this->layers, this->num_layers,  in insert_rule()
277 	new_rule = create_rule(id, layers, num_layers, NULL);  in insert_rule()
332 			.level = dst->num_layers,  in merge_tree()
339 		if (WARN_ON_ONCE(walker_rule->num_layers != 1))  in merge_tree()
372 	if (WARN_ON_ONCE(src->num_layers != 1 || dst->num_layers < 1)) {  in merge_ruleset()
376 	dst->access_masks[dst->num_layers - 1] =  in merge_ruleset()
422 				  walker_rule->num_layers);  in inherit_tree()
454 	if (WARN_ON_ONCE(child->num_layers <= parent->num_layers)) {  in inherit_ruleset()
460 	       flex_array_size(parent, access_masks, parent->num_layers));  in inherit_ruleset()
535 	u32 num_layers;  in landlock_merge_ruleset()  local
543 		if (parent->num_layers >= LANDLOCK_MAX_NUM_LAYERS)  in landlock_merge_ruleset()
545 		num_layers = parent->num_layers + 1;  in landlock_merge_ruleset()
547 		num_layers = 1;  in landlock_merge_ruleset()
551 	new_dom = create_ruleset(num_layers);  in landlock_merge_ruleset()
638 	for (layer_level = 0; layer_level < rule->num_layers; layer_level++) {  in landlock_unmask_layers()
717 	for (layer_level = 0; layer_level < domain->num_layers; layer_level++) {  in landlock_init_layer_masks()