| /linux/security/apparmor/include/ |
| H A D | label.h | 60 struct aa_label *aa_vec_find_or_create_label(struct aa_profile **vec, int len,
103 struct aa_label;
106 struct aa_label __rcu *label;
127 struct aa_label { struct
168 int aa_label_next_confined(const struct aa_label *l, int i);
249 static inline bool label_mediates(const struct aa_label *L, unsigned char C) in label_mediates()
254 static inline bool label_mediates_safe(const struct aa_label *L, unsigned char C) in label_mediates_safe()
265 void aa_label_destroy(struct aa_label *label);
266 void aa_label_free(struct aa_label *label);
268 bool aa_label_init(struct aa_label *label, int size, gfp_t gfp);
[all …]
|
| H A D | cred.h | 22 static inline struct aa_label *cred_label(const struct cred *cred) in cred_label()
24 struct aa_label **blob = cred->security + apparmor_blob_sizes.lbs_cred; in cred_label()
31 struct aa_label *label) in set_cred_label()
33 struct aa_label **blob = cred->security + apparmor_blob_sizes.lbs_cred; in set_cred_label()
45 static inline struct aa_label *aa_get_newest_cred_label(const struct cred *cred) in aa_get_newest_cred_label()
50 static inline struct aa_label *aa_get_newest_cred_label_condref(const struct cred *cred, in aa_get_newest_cred_label_condref()
53 struct aa_label *l = cred_label(cred); in aa_get_newest_cred_label_condref()
64 static inline void aa_put_label_condref(struct aa_label *l, bool needput) in aa_put_label_condref()
78 static inline struct aa_label *aa_current_raw_label(void) in aa_current_raw_label()
92 static inline struct aa_label *aa_get_current_label(void) in aa_get_current_label()
[all …]
|
| H A D | mount.h | 29 struct aa_label *label, const struct path *path,
33 struct aa_label *label, const struct path *path,
38 struct aa_label *label, const struct path *path,
42 struct aa_label *label, const struct path *path,
45 struct aa_label *label, const struct path *from_path,
49 struct aa_label *label, const char *dev_name,
54 struct aa_label *label, struct vfsmount *mnt, int flags);
57 struct aa_label *label, const struct path *old_path,
|
| H A D | task.h | 35 struct aa_label *nnp;
36 struct aa_label *onexec;
37 struct aa_label *previous;
43 int aa_replace_current_label(struct aa_label *label);
45 void aa_set_current_onexec(struct aa_label *label, bool stack);
46 int aa_set_current_hat(struct aa_label *label, u64 token);
48 struct aa_label *aa_get_task_label(struct task_struct *task);
106 int aa_may_ptrace(const struct cred *tracer_cred, struct aa_label *tracer,
107 const struct cred *tracee_cred, struct aa_label *tracee,
|
| H A D | net.h | 50 struct aa_label __rcu *label;
51 struct aa_label __rcu *peer;
52 struct aa_label __rcu *peer_lastupdate; /* ptr cmp only, no deref */
99 int aa_af_perm(const struct cred *subj_cred, struct aa_label *label,
111 int aa_label_sk_perm(const struct cred *subj_cred, struct aa_label *label,
113 int aa_sock_file_perm(const struct cred *subj_cred, struct aa_label *label,
117 int apparmor_secmark_check(struct aa_label *label, char *op, u32 request,
|
| H A D | file.h | 44 struct aa_label __rcu *label;
77 const char *target, struct aa_label *tlabel, kuid_t ouid,
92 struct aa_label *label, const struct path *path,
95 int aa_path_link(const struct cred *subj_cred, struct aa_label *label,
100 struct aa_label *label, struct file *file,
|
| H A D | resource.h | 36 int aa_task_setrlimit(const struct cred *subj_cred, struct aa_label *label,
40 void __aa_transition_rlimits(struct aa_label *old, struct aa_label *new);
|
| H A D | af_unix.h | 36 struct aa_label *label, const char *op, u32 request,
38 struct aa_label *peer_label);
40 int aa_unix_create_perm(struct aa_label *label, int family, int type,
52 int aa_unix_file_perm(const struct cred *subj_cred, struct aa_label *label,
|
| H A D | policy.h | 280 struct aa_label label;
306 struct aa_profile *aa_fqlookupn_profile(struct aa_label *base,
309 ssize_t aa_replace_profiles(struct aa_ns *view, struct aa_label *label,
312 ssize_t aa_remove_profiles(struct aa_ns *view, struct aa_label *label,
448 struct aa_label *label, struct aa_ns *ns);
450 struct aa_label *label, struct aa_ns *ns);
452 struct aa_label *label, struct aa_ns *ns,
|
| H A D | audit.h | 118 struct aa_label *subj_label;
128 struct aa_label *peer;
166 struct aa_label *target;
202 int aa_audit_perm_error(struct aa_label *label, u32 request, int error,
|
| H A D | ipc.h | 19 int aa_may_signal(const struct cred *subj_cred, struct aa_label *sender,
20 const struct cred *target_cred, struct aa_label *target,
|
| H A D | capability.h | 19 struct aa_label;
41 int aa_capable(const struct cred *subj_cred, struct aa_label *label,
|
| H A D | af_inet.h | 20 int aa_inet_create_perm(struct aa_label *label, int family, int type,
33 struct aa_label *label, const char *op, u32 request,
|
| /linux/security/apparmor/ |
| H A D | label.c | 48 RCU_INIT_POINTER(proxy->label, (struct aa_label *)PROXY_POISON); in free_proxy()
61 struct aa_proxy *aa_alloc_proxy(struct aa_label *label, gfp_t gfp) in aa_alloc_proxy()
75 void __aa_proxy_redirect(struct aa_label *orig, struct aa_label *new) in __aa_proxy_redirect()
77 struct aa_label *tmp; in __aa_proxy_redirect()
90 static void __proxy_share(struct aa_label *old, struct aa_label *new) in __proxy_share()
204 static void accum_label_info(struct aa_label *new) in accum_label_info()
324 void aa_label_destroy(struct aa_label *label) in aa_label_destroy()
351 void aa_label_free(struct aa_label *label) in aa_label_free()
360 static void label_free_switch(struct aa_label *label) in label_free_switch()
372 struct aa_label *label = container_of(head, struct aa_label, rcu); in label_free_rcu()
[all …]
|
| H A D | task.c | 31 struct aa_label *aa_get_task_label(struct task_struct *task) in aa_get_task_label()
33 struct aa_label *p; in aa_get_task_label()
48 int aa_replace_current_label(struct aa_label *label) in aa_replace_current_label()
50 struct aa_label *old = aa_current_raw_label(); in aa_replace_current_label()
67 struct aa_label *tmp = ctx->nnp; in aa_replace_current_label()
96 struct aa_label *label; in aa_replace_stale_label_tw_func()
125 void aa_set_current_onexec(struct aa_label *label, bool stack) in aa_set_current_onexec()
145 int aa_set_current_hat(struct aa_label *label, u64 token) in aa_set_current_hat()
256 struct aa_label *peer, u32 request, in profile_ptrace_perm()
272 struct aa_label *tracer, u32 request, in profile_tracee_perm()
[all …]
|
| H A D | domain.c | 51 struct aa_label *to_label, in may_change_ptraced_domain()
55 struct aa_label *tracerl = NULL; in may_change_ptraced_domain()
131 struct aa_label *label, bool stack, in label_compound_match()
193 struct aa_label *label, bool stack, in label_components_match()
256 static int label_match(const struct aa_profile *profile, struct aa_label *label, in label_match()
291 struct aa_label *target, bool stack, in change_profile_perms()
394 static struct aa_label *find_attach(const struct path *path, in find_attach()
523 struct aa_label *x_table_lookup(struct aa_profile *profile, u32 xindex, in x_table_lookup()
527 struct aa_label *label = NULL; in x_table_lookup()
574 static struct aa_label *x_to_label(struct aa_profile *profile, in x_to_label()
[all …]
|
| H A D | file.c | 98 const char *target, struct aa_label *tlabel, in aa_audit_file()
157 struct aa_label *label, in path_name()
288 struct aa_label *label, in aa_path_perm()
438 struct aa_label *label, struct dentry *old_dentry, in aa_path_link()
469 static void update_file_ctx(struct aa_file_ctx *fctx, struct aa_label *label, in update_file_ctx()
472 struct aa_label *l, *old; in update_file_ctx()
491 struct aa_label *label, in __file_path_perm()
492 struct aa_label *flabel, struct file *file, in __file_path_perm()
552 struct aa_label *label, in __file_sock_perm()
553 struct aa_label *flabel, struct file *file, in __file_sock_perm()
[all …]
|
| H A D | af_unix.c | 35 struct aa_label *label, const struct path *path) in unix_fs_perm()
393 struct aa_label *peer_label, in profile_peer_perm()
430 int aa_unix_create_perm(struct aa_label *label, int family, int type, in aa_unix_create_perm()
447 struct aa_label *label, in aa_unix_label_sk_perm()
465 struct aa_label *label; in aa_unix_sock_perm()
493 struct aa_label *label; in aa_unix_bind_perm()
533 struct aa_label *label; in aa_unix_listen_perm()
555 struct aa_label *label; in aa_unix_accept_perm()
589 struct aa_label *label; in aa_unix_opt_perm()
607 struct aa_label *label, const char *op, u32 request, in unix_peer_perm()
[all …]
|
| H A D | lsm.c | 130 struct aa_label *tracer, *tracee; in apparmor_ptrace_access_check()
149 struct aa_label *tracer, *tracee; in apparmor_ptrace_traceme()
169 struct aa_label *label; in apparmor_capget()
201 struct aa_label *label; in apparmor_capable()
224 struct aa_label *label; in common_perm()
369 struct aa_label *label; in apparmor_path_link()
389 struct aa_label *label; in apparmor_path_rename()
467 struct aa_label *label; in apparmor_file_open()
512 struct aa_label *label = begin_current_label_crit_section(&needput); in apparmor_file_alloc_security()
530 struct aa_label *label; in common_file_perm()
[all …]
|
| H A D | resource.c | 58 unsigned long value, struct aa_label *peer, in audit_resource()
114 int aa_task_setrlimit(const struct cred *subj_cred, struct aa_label *label, in aa_task_setrlimit()
119 struct aa_label *peer; in aa_task_setrlimit()
153 void __aa_transition_rlimits(struct aa_label *old_l, struct aa_label *new_l) in __aa_transition_rlimits()
|
| H A D | ipc.c | 80 struct aa_label *peer, u32 request, in profile_signal_perm()
102 int aa_may_signal(const struct cred *subj_cred, struct aa_label *sender, in aa_may_signal()
103 const struct cred *target_cred, struct aa_label *target, in aa_may_signal()
|
| H A D | mount.c | 329 struct aa_label *label, const struct path *path, in aa_remount()
356 struct aa_label *label, const struct path *path, in aa_bind_mount()
397 struct aa_label *label, const struct path *path, in aa_mount_change_type()
425 struct aa_label *label, const struct path *from_path, in aa_move_mount()
458 int aa_move_mount_old(const struct cred *subj_cred, struct aa_label *label, in aa_move_mount_old()
476 int aa_new_mount(const struct cred *subj_cred, struct aa_label *label, in aa_new_mount()
578 int aa_umount(const struct cred *subj_cred, struct aa_label *label, in aa_umount()
605 static struct aa_label *build_pivotroot(struct aa_profile *profile, in build_pivotroot()
663 int aa_pivotroot(const struct cred *subj_cred, struct aa_label *label, in aa_pivotroot()
668 struct aa_label *target = NULL; in aa_pivotroot()
|
| H A D | audit.c | 118 struct aa_label *label = ad->subj_label; in audit_pre()
167 int aa_audit_perm_error(struct aa_label *label, u32 request, int error, in aa_audit_perm_error()
240 struct aa_label *label;
304 struct aa_label *label; in aa_audit_rule_match()
|
| H A D | net.c | 276 int aa_af_perm(const struct cred *subj_cred, struct aa_label *label, in aa_af_perm()
287 int aa_label_sk_perm(const struct cred *subj_cred, struct aa_label *label, in aa_label_sk_perm()
311 struct aa_label *label; in aa_sk_perm()
327 int aa_sock_file_perm(const struct cred *subj_cred, struct aa_label *label, in aa_sock_file_perm()
351 struct aa_label *label; in apparmor_secmark_init()
405 int apparmor_secmark_check(struct aa_label *label, char *op, u32 request, in apparmor_secmark_check()
|
| H A D | policy.c | 157 struct aa_label *l; in __add_profile()
663 struct aa_profile *aa_fqlookupn_profile(struct aa_label *base, in aa_fqlookupn_profile()
862 static int audit_policy(struct aa_label *subj_label, const char *op, in audit_policy()
883 struct aa_label *label, in policy_ns_capable()
908 struct aa_label *label, struct aa_ns *ns) in aa_policy_view_capable()
928 struct aa_label *label, struct aa_ns *ns) in aa_policy_admin_capable()
943 struct aa_label *label; in aa_current_policy_view_capable()
955 struct aa_label *label; in aa_current_policy_admin_capable()
966 struct aa_label *label, in is_subset_of_obj_privilege()
1001 int aa_may_manage_policy(const struct cred *subj_cred, struct aa_label *label, in aa_may_manage_policy()
[all …]
|