| /linux/security/apparmor/include/ |
| H A D | policy.h | 258 struct aa_profile { struct
260 struct aa_profile __rcu *parent; argument
294 struct aa_profile *aa_alloc_profile(const char *name, struct aa_proxy *proxy, argument
296 struct aa_profile *aa_alloc_null(struct aa_profile *parent, const char *name,
298 struct aa_profile *aa_new_learning_profile(struct aa_profile *parent, bool hat,
300 void aa_free_profile(struct aa_profile *profile);
301 struct aa_profile *aa_find_child(struct aa_profile *parent, const char *name);
302 struct aa_profile *aa_lookupn_profile(struct aa_ns *ns, const char *hname,
304 struct aa_profile *aa_fqlookupn_profile(struct aa_label *base,
323 static inline struct aa_profile *aa_get_newest_profile(struct aa_profile *p) in aa_get_newest_profile()
[all …]
|
| H A D | apparmorfs.h | 62 struct aa_profile;
110 void __aafs_profile_rmdir(struct aa_profile *profile);
111 void __aafs_profile_migrate_dents(struct aa_profile *old,
112 struct aa_profile *new);
113 int __aafs_profile_mkdir(struct aa_profile *profile, struct dentry *parent);
|
| H A D | label.h | 57 struct aa_profile;
59 int aa_vec_unique(struct aa_profile **vec, int n, int flags);
60 struct aa_label *aa_vec_find_or_create_label(struct aa_profile **vec, int len,
63 aa_sort_and_merge_profiles((N), (struct aa_profile **)(V))
143 struct aa_profile *profile[2];
146 DECLARE_FLEX_ARRAY(struct aa_profile *, vec);
273 struct aa_profile *__aa_label_next_not_in_set(struct label_it *I,
282 struct aa_profile *aa_label_next_in_merge(struct label_it *I,
345 int aa_label_match(struct aa_profile *profile, struct aa_ruleset *rules,
|
| H A D | perms.h | 181 struct aa_profile *__p2; \
188 struct aa_profile *__p1; \
209 void aa_apply_modes_to_perms(struct aa_profile *profile,
213 void aa_profile_match_label(struct aa_profile *profile,
216 int aa_check_perms(struct aa_profile *profile, struct aa_perms *perms,
|
| H A D | policy_ns.h | 65 struct aa_profile *unconfined;
99 static inline struct aa_profile *aa_deref_parent(struct aa_profile *p) in aa_deref_parent()
|
| H A D | file.h | 21 struct aa_profile;
75 struct aa_profile *profile, struct aa_perms *perms,
88 struct aa_profile *profile, const char *name,
|
| H A D | policy_unpack.h | 22 struct aa_profile *new;
23 struct aa_profile *old;
24 struct aa_profile *rename;
|
| H A D | crypto.h | 19 int aa_calc_profile_hash(struct aa_profile *profile, u32 version, void *start,
26 static inline int aa_calc_profile_hash(struct aa_profile *profile, u32 version, in aa_calc_profile_hash()
|
| H A D | net.h | 88 int aa_do_perms(struct aa_profile *profile, struct aa_policydb *policy,
96 int aa_profile_af_perm(struct aa_profile *profile,
102 static inline int aa_profile_af_sk_perm(struct aa_profile *profile, in aa_profile_af_sk_perm()
|
| H A D | audit.h | 153 struct aa_profile *profile;
188 int aa_audit(int type, struct aa_profile *profile,
|
| /linux/security/apparmor/ |
| H A D | policy.c | 154 static void __add_profile(struct list_head *list, struct aa_profile *profile) in __add_profile()
183 static void __list_remove_profile(struct aa_profile *profile) in __list_remove_profile()
199 static void __remove_profile(struct aa_profile *profile) in __remove_profile()
201 struct aa_profile *curr, *to_remove; in __remove_profile()
209 curr = list_first_entry(&profile->base.profiles, struct aa_profile, base.list); in __remove_profile()
215 struct aa_profile, base.list); in __remove_profile()
245 struct aa_profile *profile, *tmp; in __aa_profile_list_release()
317 void aa_free_profile(struct aa_profile *profile) in aa_free_profile()
367 struct aa_profile *aa_alloc_profile(const char *hname, struct aa_proxy *proxy, in aa_alloc_profile()
370 struct aa_profile *profile; in aa_alloc_profile()
[all …]
|
| H A D | label.c | 137 static int profile_cmp(struct aa_profile *a, struct aa_profile *b) in profile_cmp()
168 static int vec_cmp(struct aa_profile **a, int an, struct aa_profile **b, int bn) in vec_cmp()
189 static bool vec_is_stale(struct aa_profile **vec, int n) in vec_is_stale()
226 return profile_cmp(*(struct aa_profile **)a, *(struct aa_profile **)b); in sort_cmp()
234 static inline int unique(struct aa_profile **vec, int n) in unique()
273 int aa_vec_unique(struct aa_profile **vec, int n, int flags) in aa_vec_unique()
282 sort(vec, n, sizeof(struct aa_profile *), sort_cmp, NULL); in aa_vec_unique()
289 struct aa_profile *tmp = vec[i]; in aa_vec_unique()
328 struct aa_profile *profile; in aa_label_destroy()
335 label->vec[i.i] = (struct aa_profile *) in aa_label_destroy()
[all …]
|
| H A D | domain.c | 92 static inline aa_state_t match_component(struct aa_profile *profile, in match_component()
93 struct aa_profile *tp, in match_component()
128 static int label_compound_match(struct aa_profile *profile, in label_compound_match()
134 struct aa_profile *tp; in label_compound_match()
190 static int label_components_match(struct aa_profile *profile, in label_components_match()
196 struct aa_profile *tp; in label_components_match()
254 static int label_match(struct aa_profile *profile, struct aa_label *label, in label_match()
288 static int change_profile_perms(struct aa_profile *profile, in change_profile_perms()
312 struct aa_profile *profile, aa_state_t state) in aa_xattrs_match()
395 struct aa_profile *profile, *candidate = NULL; in find_attach()
[all …]
|
| H A D | af_unix.c | 172 static aa_state_t match_label(struct aa_profile *profile, in match_label()
174 u32 request, struct aa_profile *peer, in match_label()
201 static int profile_create_perm(struct aa_profile *profile, int family, in profile_create_perm()
225 static int profile_sk_perm(struct aa_profile *profile, in profile_sk_perm()
254 static int profile_bind_perm(struct aa_profile *profile, struct sock *sk, in profile_bind_perm()
285 static int profile_listen_perm(struct aa_profile *profile, struct sock *sk, in profile_listen_perm()
321 static int profile_accept_perm(struct aa_profile *profile, in profile_accept_perm()
351 static int profile_opt_perm(struct aa_profile *profile, u32 request, in profile_opt_perm()
388 static int profile_peer_perm(struct aa_profile *profile, u32 request, in profile_peer_perm()
407 struct aa_profile *peerp; in profile_peer_perm()
[all …]
|
| H A D | mount.c | 135 struct aa_profile *profile, const char *op, in audit_mount()
281 static int path_flags(struct aa_profile *profile, const struct path *path) in path_flags()
306 struct aa_profile *profile, in match_mnt_path_str()
367 struct aa_profile *profile, const struct path *path, in match_mnt()
398 struct aa_profile *profile; in aa_remount()
424 struct aa_profile *profile; in aa_bind_mount()
462 struct aa_profile *profile; in aa_mount_change_type()
489 struct aa_profile *profile; in aa_move_mount()
539 struct aa_profile *profile; in aa_new_mount()
602 struct aa_profile *profile, const struct path *path, in profile_umount()
[all …]
|
| H A D | apparmorfs.c | 696 static void profile_query_cb(struct aa_profile *profile, struct aa_perms *perms, in profile_query_cb()
762 struct aa_profile *profile; in query_data()
851 struct aa_profile *profile; in query_label()
1166 struct aa_profile *profile = labels_profile(label); in seq_profile_name_show()
1177 struct aa_profile *profile = labels_profile(label); in seq_profile_mode_show()
1188 struct aa_profile *profile = labels_profile(label); in seq_profile_attach_show()
1204 struct aa_profile *profile = labels_profile(label); in seq_profile_hash_show()
1256 struct aa_profile *profile; in seq_ns_nsstacked_show()
1607 void __aafs_profile_rmdir(struct aa_profile *profile) in __aafs_profile_rmdir()
1609 struct aa_profile *child; in __aafs_profile_rmdir()
[all …]
|
| H A D | capability.c | 67 static int audit_caps(struct apparmor_audit_data *ad, struct aa_profile *profile, in audit_caps()
121 static int profile_capable(struct aa_profile *profile, int cap, in profile_capable()
182 struct aa_profile *profile; in aa_capable()
194 kernel_cap_t aa_profile_capget(struct aa_profile *profile) in aa_profile_capget()
|
| H A D | resource.c | 57 struct aa_profile *profile, unsigned int resource, in audit_resource()
89 struct aa_profile *profile, unsigned int resource, in profile_setrlimit()
118 struct aa_profile *profile; in aa_task_setrlimit()
157 struct aa_profile *old, *new; in __aa_transition_rlimits()
|
| H A D | task.c | 228 struct aa_profile *profile, in profile_ptrace_perm()
244 struct aa_profile *tracee, in profile_tracee_perm()
256 struct aa_profile *tracer, in profile_tracer_perm()
293 struct aa_profile *profile; in aa_may_ptrace()
347 int aa_profile_ns_perm(struct aa_profile *profile, in aa_profile_ns_perm()
|
| H A D | net.c | 165 int aa_do_perms(struct aa_profile *profile, struct aa_policydb *policy, in aa_do_perms()
250 int aa_profile_af_perm(struct aa_profile *profile, in aa_profile_af_perm()
275 struct aa_profile *profile; in aa_af_perm()
295 struct aa_profile *profile; in aa_label_sk_perm()
361 static int aa_secmark_perm(struct aa_profile *profile, u32 request, u32 secid, in aa_secmark_perm()
398 struct aa_profile *profile; in apparmor_secmark_check()
|
| H A D | file.c | 96 struct aa_profile *profile, struct aa_perms *perms, in aa_audit_file()
154 struct aa_profile *profile; in path_name()
227 struct aa_profile *profile, const char *name, in __aa_path_perm()
248 struct aa_profile *profile, in profile_path_perm()
286 struct aa_profile *profile; in aa_path_perm()
325 struct aa_profile *profile, in profile_path_link()
443 struct aa_profile *profile; in aa_path_link()
488 struct aa_profile *profile; in __file_path_perm()
|
| H A D | ipc.c | 79 struct aa_profile *profile, in profile_signal_perm()
106 struct aa_profile *profile; in aa_may_signal()
|
| H A D | policy_ns.c | 83 static struct aa_profile *alloc_unconfined(const char *name) in alloc_unconfined()
85 struct aa_profile *profile; in alloc_unconfined()
367 struct aa_profile *kernel_p; in aa_alloc_root_ns()
|
| H A D | audit.c | 120 struct aa_profile *profile = labels_profile(label); in audit_pre()
166 int aa_audit(int type, struct aa_profile *profile, in aa_audit()
|
| H A D | lib.c | 363 void aa_apply_modes_to_perms(struct aa_profile *profile, struct aa_perms *perms) in aa_apply_modes_to_perms()
388 void aa_profile_match_label(struct aa_profile *profile, in aa_profile_match_label()
420 int aa_check_perms(struct aa_profile *profile, struct aa_perms *perms, in aa_check_perms()
|