| /linux/security/apparmor/include/ |
| H A D | policy.h | 257 struct aa_profile { struct
259 struct aa_profile __rcu *parent; argument
293 struct aa_profile *aa_alloc_profile(const char *name, struct aa_proxy *proxy, argument
295 struct aa_profile *aa_alloc_null(struct aa_profile *parent, const char *name,
297 struct aa_profile *__aa_new_learning_profile(struct aa_profile *parent,
300 struct aa_profile *aa_new_learning_profile(struct aa_profile *parent, bool hat,
302 void aa_free_profile(struct aa_profile *profile);
303 struct aa_profile *aa_find_child(struct aa_profile *parent, const char *name);
304 struct aa_profile *aa_lookupn_profile(struct aa_ns *ns, const char *hname,
306 struct aa_profile *aa_fqlookupn_profile(struct aa_label *base,
[all …]
|
| H A D | apparmorfs.h | 65 struct aa_profile;
113 void __aafs_profile_rmdir(struct aa_profile *profile);
114 void __aafs_profile_migrate_dents(struct aa_profile *old,
115 struct aa_profile *new);
116 int __aafs_profile_mkdir(struct aa_profile *profile, struct dentry *parent);
126 void __aa_remove_rawdata_symlink_dents(struct aa_profile *profile);
127 int __aa_create_rawdata_symlink_dents(struct aa_profile *profile);
140 static inline void __aa_remove_rawdata_symlink_dents(struct aa_profile *profile) in __aa_remove_rawdata_symlink_dents()
145 static inline int __aa_create_rawdata_symlink_dents(struct aa_profile *profile) in __aa_create_rawdata_symlink_dents()
|
| H A D | label.h | 57 struct aa_profile;
59 int aa_vec_unique(struct aa_profile **vec, int n, int flags);
60 struct aa_label *aa_vec_find_or_create_label(struct aa_profile **vec, int len,
63 aa_sort_and_merge_profiles((N), (struct aa_profile **)(V))
143 struct aa_profile *profile[2];
146 DECLARE_FLEX_ARRAY(struct aa_profile *, vec);
274 struct aa_profile *__aa_label_next_not_in_set(struct label_it *I,
283 struct aa_profile *aa_label_next_in_merge(struct label_it *I,
346 int aa_label_match(const struct aa_profile *profile, struct aa_ruleset *rules,
|
| H A D | policy_ns.h | 65 struct aa_profile *unconfined;
99 static inline struct aa_profile *aa_deref_parent(struct aa_profile *p) in aa_deref_parent()
|
| H A D | perms.h | 181 struct aa_profile *__p2; \
188 struct aa_profile *__p1; \
209 void aa_apply_modes_to_perms(const struct aa_profile *profile,
213 void aa_profile_match_label(const struct aa_profile *profile,
216 int aa_check_perms(struct aa_profile *profile, const struct aa_perms *perms,
|
| H A D | crypto.h | 19 int aa_calc_profile_hash(struct aa_profile *profile, u32 version, void *start,
26 static inline int aa_calc_profile_hash(struct aa_profile *profile, u32 version, in aa_calc_profile_hash()
|
| H A D | file.h | 21 struct aa_profile;
75 struct aa_profile *profile, const struct aa_perms *perms,
88 struct aa_profile *profile, const char *name,
|
| H A D | policy_unpack.h | 23 struct aa_profile *new;
24 struct aa_profile *old;
25 struct aa_profile *rename;
|
| H A D | net.h | 88 int aa_do_perms(struct aa_profile *profile, struct aa_policydb *policy,
96 int aa_profile_af_perm(struct aa_profile *profile,
102 static inline int aa_profile_af_sk_perm(struct aa_profile *profile, in aa_profile_af_sk_perm()
|
| H A D | audit.h | 154 struct aa_profile *profile;
191 int aa_audit(int type, struct aa_profile *profile,
|
| /linux/security/apparmor/ |
| H A D | policy.c | 155 static void __add_profile(struct list_head *list, struct aa_profile *profile) in __add_profile()
184 static void __list_remove_profile(struct aa_profile *profile) in __list_remove_profile()
200 static void __remove_profile(struct aa_profile *profile) in __remove_profile()
202 struct aa_profile *curr, *to_remove; in __remove_profile()
210 curr = list_first_entry(&profile->base.profiles, struct aa_profile, base.list); in __remove_profile()
216 struct aa_profile, base.list); in __remove_profile()
253 struct aa_profile *profile, *tmp; in __aa_profile_list_release()
325 void aa_free_profile(struct aa_profile *profile) in aa_free_profile()
375 struct aa_profile *aa_alloc_profile(const char *hname, struct aa_proxy *proxy, in aa_alloc_profile()
378 struct aa_profile *profile; in aa_alloc_profile()
[all …]
|
| H A D | domain.c | 94 static inline aa_state_t match_component(const struct aa_profile *profile, in match_component()
95 const struct aa_profile *tp, in match_component()
130 static int label_compound_match(const struct aa_profile *profile, in label_compound_match()
136 struct aa_profile *tp; in label_compound_match()
192 static int label_components_match(const struct aa_profile *profile, in label_components_match()
198 struct aa_profile *tp; in label_components_match()
256 static int label_match(const struct aa_profile *profile, struct aa_label *label, in label_match()
290 static int change_profile_perms(const struct aa_profile *profile, in change_profile_perms()
314 const struct aa_profile *profile, aa_state_t state) in aa_xattrs_match()
400 struct aa_profile *profile, *candidate = NULL; in find_attach()
[all …]
|
| H A D | label.c | 137 static int profile_cmp(struct aa_profile *a, struct aa_profile *b) in profile_cmp()
168 static int vec_cmp(struct aa_profile * const *a, int an, in vec_cmp()
169 struct aa_profile * const *b, int bn) in vec_cmp()
190 static bool vec_is_stale(struct aa_profile **vec, int n) in vec_is_stale()
227 return profile_cmp(*(struct aa_profile **)a, *(struct aa_profile **)b); in sort_cmp()
235 static inline int unique(struct aa_profile **vec, int n) in unique()
274 int aa_vec_unique(struct aa_profile **vec, int n, int flags) in aa_vec_unique()
283 sort(vec, n, sizeof(struct aa_profile *), sort_cmp, NULL); in aa_vec_unique()
290 struct aa_profile *tmp = vec[i]; in aa_vec_unique()
329 struct aa_profile *profile; in aa_label_destroy()
[all …]
|
| H A D | af_unix.c | 173 static aa_state_t match_label(struct aa_profile *profile, in match_label()
175 u32 request, struct aa_profile *peer, in match_label()
202 static int profile_create_perm(struct aa_profile *profile, int family, in profile_create_perm()
226 static int profile_sk_perm(struct aa_profile *profile, in profile_sk_perm()
255 static int profile_bind_perm(struct aa_profile *profile, struct sock *sk, in profile_bind_perm()
286 static int profile_listen_perm(struct aa_profile *profile, struct sock *sk, in profile_listen_perm()
322 static int profile_accept_perm(struct aa_profile *profile, in profile_accept_perm()
352 static int profile_opt_perm(struct aa_profile *profile, u32 request, in profile_opt_perm()
389 static int profile_peer_perm(struct aa_profile *profile, u32 request, in profile_peer_perm()
408 struct aa_profile *peerp; in profile_peer_perm()
[all …]
|
| H A D | mount.c | 214 static int path_flags(const struct aa_profile *profile, const struct path *path) in path_flags()
238 static int match_mnt_path_str(struct aa_profile *profile, in match_mnt_path_str()
301 static int match_mnt(struct aa_profile *profile, const struct path *path, in match_mnt()
332 struct aa_profile *profile; in aa_remount()
359 struct aa_profile *profile; in aa_bind_mount()
400 struct aa_profile *profile; in aa_mount_change_type()
428 struct aa_profile *profile; in aa_move_mount()
480 struct aa_profile *profile; in aa_new_mount()
544 static int profile_umount(struct aa_profile *profile, const struct path *path, in profile_umount()
581 struct aa_profile *profile; in aa_umount()
[all …]
|
| H A D | apparmorfs.c | 859 static void profile_query_cb(const struct aa_profile *profile, in profile_query_cb()
926 struct aa_profile *profile; in query_data()
1016 struct aa_profile *profile; in query_label()
1332 struct aa_profile *profile = labels_profile(label); in seq_profile_name_show()
1343 struct aa_profile *profile = labels_profile(label); in seq_profile_mode_show()
1354 struct aa_profile *profile = labels_profile(label); in seq_profile_attach_show()
1370 struct aa_profile *profile = labels_profile(label); in seq_profile_hash_show()
1423 struct aa_profile *profile; in seq_ns_nsstacked_show()
1743 void __aafs_profile_rmdir(struct aa_profile *profile) in __aafs_profile_rmdir()
1745 struct aa_profile *child; in __aafs_profile_rmdir()
[all …]
|
| H A D | resource.c | 57 struct aa_profile *profile, unsigned int resource, in audit_resource()
89 struct aa_profile *profile, unsigned int resource, in profile_setrlimit()
118 struct aa_profile *profile; in aa_task_setrlimit()
157 struct aa_profile *old, *new; in __aa_transition_rlimits()
|
| H A D | capability.c | 67 static int audit_caps(struct apparmor_audit_data *ad, struct aa_profile *profile, in audit_caps()
121 static int profile_capable(struct aa_profile *profile, int cap, in profile_capable()
182 struct aa_profile *profile; in aa_capable()
194 kernel_cap_t aa_profile_capget(const struct aa_profile *profile) in aa_profile_capget()
|
| H A D | af_inet.c | 230 static inline int profile_sk_perm(struct aa_profile *profile, u32 request, in profile_sk_perm()
242 static int profile_create_perm(struct aa_profile *profile, int family, in profile_create_perm()
254 static int profile_remote_perm(struct aa_profile *profile, in profile_remote_perm()
270 static int profile_bind_perm(struct aa_profile *profile, in profile_bind_perm()
279 static int profile_listen_perm(struct aa_profile *profile, in profile_listen_perm()
293 static inline int profile_accept_perm(struct aa_profile *profile, in profile_accept_perm()
310 static int profile_opt_perm(struct aa_profile *profile, u32 request, in profile_opt_perm()
334 struct aa_profile *PROFILE; \
393 struct aa_profile *profile; in aa_inet_create_perm()
|
| H A D | task.c | 255 struct aa_profile *profile, in profile_ptrace_perm()
271 struct aa_profile *tracee, in profile_tracee_perm()
283 struct aa_profile *tracer, in profile_tracer_perm()
320 struct aa_profile *profile; in aa_may_ptrace()
374 int aa_profile_ns_perm(struct aa_profile *profile, in aa_profile_ns_perm()
|
| H A D | net.c | 168 int aa_do_perms(struct aa_profile *profile, struct aa_policydb *policy, in aa_do_perms()
253 int aa_profile_af_perm(struct aa_profile *profile, in aa_profile_af_perm()
279 struct aa_profile *profile; in aa_af_perm()
297 struct aa_profile *profile; in aa_label_sk_perm()
371 static int aa_secmark_perm(struct aa_profile *profile, u32 request, u32 secid, in aa_secmark_perm()
408 struct aa_profile *profile; in apparmor_secmark_check()
|
| H A D | file.c | 96 struct aa_profile *profile, const struct aa_perms *perms, in aa_audit_file()
161 struct aa_profile *profile; in path_name()
234 struct aa_profile *profile, const char *name, in __aa_path_perm()
255 struct aa_profile *profile, in profile_path_perm()
293 struct aa_profile *profile; in aa_path_perm()
332 struct aa_profile *profile, in profile_path_link()
450 struct aa_profile *profile; in aa_path_link()
495 struct aa_profile *profile; in __file_path_perm()
|
| H A D | audit.c | 121 struct aa_profile *profile = labels_profile(label); in audit_pre()
174 struct aa_profile *profile; in aa_audit_perm_error()
200 int aa_audit(int type, struct aa_profile *profile, in aa_audit()
|
| H A D | ipc.c | 79 struct aa_profile *profile, in profile_signal_perm()
106 struct aa_profile *profile; in aa_may_signal()
|
| H A D | policy_ns.c | 83 static struct aa_profile *alloc_unconfined(const char *name) in alloc_unconfined()
85 struct aa_profile *profile; in alloc_unconfined()
367 struct aa_profile *kernel_p; in aa_alloc_root_ns()
|