| /linux/drivers/platform/x86/dell/ |
| H A D | dell-smbios-base.c | 57 {CAP_SYS_ADMIN, CLASS_TOKEN_READ, SELECT_TOKEN_STD},
58 {CAP_SYS_ADMIN, CLASS_TOKEN_READ, SELECT_TOKEN_AC},
59 {CAP_SYS_ADMIN, CLASS_TOKEN_READ, SELECT_TOKEN_BAT},
60 {CAP_SYS_ADMIN, CLASS_TOKEN_WRITE, SELECT_TOKEN_STD},
61 {CAP_SYS_ADMIN, CLASS_TOKEN_WRITE, SELECT_TOKEN_AC},
62 {CAP_SYS_ADMIN, CLASS_TOKEN_WRITE, SELECT_TOKEN_BAT},
64 {CAP_SYS_ADMIN, CLASS_ADMIN_PROP, SELECT_ADMIN_PROP},
66 {CAP_SYS_ADMIN, CLASS_INFO, SELECT_DOCK},
67 {CAP_SYS_ADMIN, CLASS_FLASH_INTERFACE, SELECT_FLASH_INTERFACE},
93 {CAP_SYS_ADMIN, CAPSULE_EN_TOKEN, CAPSULE_DIS_TOKEN},
[all …]
|
| /linux/drivers/xen/xenbus/ |
| H A D | xenbus_dev_backend.c | 24 if (!capable(CAP_SYS_ADMIN)) in xenbus_backend_open()
77 if (!capable(CAP_SYS_ADMIN)) in xenbus_backend_ioctl()
96 if (!capable(CAP_SYS_ADMIN)) in xenbus_backend_mmap()
|
| /linux/include/linux/ |
| H A D | capability.h | 197 return capable(CAP_PERFMON) || capable(CAP_SYS_ADMIN); in perfmon_capable()
202 return capable(CAP_BPF) || capable(CAP_SYS_ADMIN); in bpf_capable()
208 ns_capable(ns, CAP_SYS_ADMIN); in checkpoint_restore_ns_capable()
214 ns_capable_noaudit(ns, CAP_SYS_ADMIN); in checkpoint_restore_ns_capable_noaudit()
|
| /linux/drivers/s390/block/ |
| H A D | dasd_ioctl.c | 43 if (!capable(CAP_SYS_ADMIN)) in dasd_ioctl_enable()
64 if (!capable(CAP_SYS_ADMIN)) in dasd_ioctl_disable()
97 if (!capable (CAP_SYS_ADMIN)) in dasd_ioctl_quiesce()
118 if (!capable (CAP_SYS_ADMIN)) in dasd_ioctl_resume()
142 if (!capable(CAP_SYS_ADMIN)) in dasd_ioctl_abortio()
176 if (!capable(CAP_SYS_ADMIN)) in dasd_ioctl_allowio()
256 if (!capable(CAP_SYS_ADMIN)) in dasd_ioctl_format()
344 if (!capable(CAP_SYS_ADMIN)) in dasd_ioctl_release_space()
387 if (!capable(CAP_SYS_ADMIN)) in dasd_ioctl_copy_pair_swap()
|
| /linux/kernel/cgroup/ |
| H A D | namespace.c | 64 if (!ns_capable(user_ns, CAP_SYS_ADMIN)) in copy_cgroup_ns()
97 if (!ns_capable(nsset->cred->user_ns, CAP_SYS_ADMIN) || in cgroupns_install()
98 !ns_capable(cgroup_ns->user_ns, CAP_SYS_ADMIN)) in cgroupns_install()
|
| /linux/tools/testing/selftests/bpf/prog_tests/ |
| H A D | deny_namespace.c | 51 __u32 cap_mask = 1ULL << CAP_SYS_ADMIN; in test_userns_create_bpf()
68 __u32 cap_mask = 1ULL << CAP_SYS_ADMIN; in test_unpriv_userns_create_no_bpf()
|
| /linux/drivers/pci/ |
| H A D | syscall.c | 26 if (!capable(CAP_SYS_ADMIN)) in SYSCALL_DEFINE5()
95 if (!capable(CAP_SYS_ADMIN) || in SYSCALL_DEFINE5()
|
| /linux/drivers/nvme/host/ |
| H A D | ioctl.c | 58 return capable(CAP_SYS_ADMIN); in nvme_admin_cmd_allowed()
73 return capable(CAP_SYS_ADMIN); in nvme_ns_cmd_allowed()
82 return capable(CAP_SYS_ADMIN); in nvme_ns_cmd_allowed()
91 return capable(CAP_SYS_ADMIN); in nvme_ns_cmd_allowed()
105 return capable(CAP_SYS_ADMIN); in nvme_cmd_allowed()
113 return capable(CAP_SYS_ADMIN); in nvme_cmd_allowed()
895 if (!capable(CAP_SYS_ADMIN)) in nvme_dev_ioctl()
900 if (!capable(CAP_SYS_ADMIN)) in nvme_dev_ioctl()
904 if (!capable(CAP_SYS_ADMIN)) in nvme_dev_ioctl()
|
| /linux/drivers/macintosh/ |
| H A D | ans-lcd.c | 112 if (!capable(CAP_SYS_ADMIN)) in anslcd_ioctl()
118 if (!capable(CAP_SYS_ADMIN)) in anslcd_ioctl()
|
| /linux/mm/ |
| H A D | hwpoison-inject.c | 109 if (!capable(CAP_SYS_ADMIN)) in hwpoison_inject()
146 if (!capable(CAP_SYS_ADMIN)) in hwpoison_unpoison()
|
| /linux/Documentation/filesystems/fuse/ |
| H A D | fuse-passthrough.rst | 53 possess the ``CAP_SYS_ADMIN`` capability. This requirement stems from several
91 The ``CAP_SYS_ADMIN`` requirement acts as a safeguard against these issues,
112 ``LOOP_SET_FD`` ioctl, which also requires ``CAP_SYS_ADMIN``.
121 The ``CAP_SYS_ADMIN`` requirement provides an additional layer of security,
131 ``CAP_SYS_ADMIN``) is a conservative and common security practice. This allows
|
| /linux/kernel/ |
| H A D | utsname.c | 132 if (!ns_capable(ns->user_ns, CAP_SYS_ADMIN) || in utsns_install()
133 !ns_capable(nsset->cred->user_ns, CAP_SYS_ADMIN)) in utsns_install()
|
| /linux/tools/testing/selftests/landlock/ |
| H A D | fs_test.c | 309 set_cap(_metadata, CAP_SYS_ADMIN); in prepare_layout_opt()
324 clear_cap(_metadata, CAP_SYS_ADMIN); in prepare_layout()
334 set_cap(_metadata, CAP_SYS_ADMIN); in cleanup_layout()
344 clear_cap(_metadata, CAP_SYS_ADMIN);
378 set_cap(_metadata, CAP_SYS_ADMIN); in create_layout1()
380 clear_cap(_metadata, CAP_SYS_ADMIN); in create_layout1()
405 set_cap(_metadata, CAP_SYS_ADMIN); in remove_layout1()
407 clear_cap(_metadata, CAP_SYS_ADMIN);
1594 set_cap(_metadata, CAP_SYS_ADMIN); in TEST_F_FORK()
1600 clear_cap(_metadata, CAP_SYS_ADMIN); in TEST_F_FORK()
[all...] |
| /linux/tools/build/feature/ |
| H A D | test-libcap.c | 13 if (cap_get_flag(caps, CAP_SYS_ADMIN, CAP_EFFECTIVE, &val) != 0) in main()
|
| /linux/fs/xfs/ |
| H A D | xfs_ioctl.c | 99 if (!capable(CAP_SYS_ADMIN)) in xfs_ioc_fsbulkstat()
277 if (!capable(CAP_SYS_ADMIN)) in xfs_ioc_bulkstat()
327 if (!capable(CAP_SYS_ADMIN)) in xfs_ioc_inumbers()
1049 if (!capable(CAP_SYS_ADMIN)) in xfs_ioc_setlabel()
1156 if (!capable(CAP_SYS_ADMIN)) in xfs_ioctl_getset_resblocks()
1407 if (!capable(CAP_SYS_ADMIN)) in xfs_file_ioctl()
1419 if (!capable(CAP_SYS_ADMIN)) in xfs_file_ioctl()
1429 if (!capable(CAP_SYS_ADMIN)) in xfs_file_ioctl()
1438 if (!capable(CAP_SYS_ADMIN)) in xfs_file_ioctl()
|
| /linux/tools/testing/selftests/bpf/progs/ |
| H A D | test_deny_namespace.c | 20 __u64 cap_mask = 1ULL << CAP_SYS_ADMIN; in BPF_PROG()
|
| /linux/ipc/ |
| H A D | namespace.c | 237 if (!ns_capable(ns->user_ns, CAP_SYS_ADMIN) || in ipcns_install()
238 !ns_capable(nsset->cred->user_ns, CAP_SYS_ADMIN)) in ipcns_install()
|
| /linux/fs/btrfs/ |
| H A D | ioctl.c | 456 if (!capable(CAP_SYS_ADMIN)) in btrfs_ioctl_fitrim()
1009 if (!capable(CAP_SYS_ADMIN)) in btrfs_ioctl_resize()
1609 if (!capable(CAP_SYS_ADMIN)) in btrfs_ioctl_tree_search()
1640 if (!capable(CAP_SYS_ADMIN)) in btrfs_ioctl_tree_search_v2()
1892 if (!capable(CAP_SYS_ADMIN)) { in btrfs_ioctl_ino_lookup()
2368 if (!capable(CAP_SYS_ADMIN)) { in btrfs_ioctl_snap_destroy()
2448 if (!capable(CAP_SYS_ADMIN)) { in btrfs_ioctl_defrag()
2460 if (!capable(CAP_SYS_ADMIN) && in btrfs_ioctl_defrag()
2518 if (!capable(CAP_SYS_ADMIN)) in btrfs_ioctl_add_dev()
2579 if (!capable(CAP_SYS_ADMIN)) in btrfs_ioctl_rm_dev_v2()
[all …]
|
| /linux/block/ |
| H A D | ioctl.c | 29 if (!capable(CAP_SYS_ADMIN)) in blkpg_do_ioctl()
327 if (capable(CAP_SYS_ADMIN)) in blkdev_pr_allowed()
516 if (!capable(CAP_SYS_ADMIN)) in blkdev_flushbuf()
536 if (!capable(CAP_SYS_ADMIN)) in blkdev_roset()
628 if (!capable(CAP_SYS_ADMIN)) in blkdev_bszset()
704 if(!capable(CAP_SYS_ADMIN)) in blkdev_common_ioctl()
709 if (!capable(CAP_SYS_ADMIN)) in blkdev_common_ioctl()
|
| /linux/fs/ext2/ |
| H A D | xattr_trusted.c | 15 return capable(CAP_SYS_ADMIN); in ext2_xattr_trusted_list()
|
| /linux/fs/jffs2/ |
| H A D | xattr_trusted.c | 39 return capable(CAP_SYS_ADMIN); in jffs2_trusted_listxattr()
|
| /linux/fs/ext4/ |
| H A D | xattr_trusted.c | 19 return capable(CAP_SYS_ADMIN); in ext4_xattr_trusted_list()
|
| /linux/drivers/scsi/arcmsr/ |
| H A D | arcmsr_attr.c | 74 if (!capable(CAP_SYS_ADMIN)) in arcmsr_sysfs_iop_message_read()
121 if (!capable(CAP_SYS_ADMIN)) in arcmsr_sysfs_iop_message_write()
168 if (!capable(CAP_SYS_ADMIN)) in arcmsr_sysfs_iop_message_clear()
|
| /linux/fs/hfsplus/ |
| H A D | ioctl.c | 36 if (!capable(CAP_SYS_ADMIN)) in hfsplus_ioctl_bless()
|
| /linux/security/integrity/evm/ |
| H A D | evm_secfs.c | 71 if (!capable(CAP_SYS_ADMIN) || (evm_initialized & EVM_SETUP_COMPLETE)) in evm_write_key()
194 if (!capable(CAP_SYS_ADMIN) || evm_xattrs_locked) in evm_write_xattrs()
|