Home
last modified time | relevance | path

Searched refs:deny (Results 1 – 25 of 40) sorted by relevance

12

/linux/security/apparmor/include/
H A Dperms.h71 u32 deny; /* explicit deny, or conflict if allow also set */ member
110 accum->deny |= addend->deny; in aa_perms_accum_raw()
111 accum->allow &= addend->allow & ~addend->deny; in aa_perms_accum_raw()
115 accum->complain |= addend->complain & ~addend->allow & ~addend->deny; in aa_perms_accum_raw()
116 accum->cond |= addend->cond & ~addend->allow & ~addend->deny; in aa_perms_accum_raw()
118 accum->prompt |= addend->prompt & ~addend->allow & ~addend->deny; in aa_perms_accum_raw()
119 accum->subtree |= addend->subtree & ~addend->deny; in aa_perms_accum_raw()
137 accum->deny |= addend->deny; in aa_perms_accum()
138 accum->allow &= addend->allow & ~accum->deny; in aa_perms_accum()
142 accum->complain |= addend->complain & ~accum->allow & ~accum->deny; in aa_perms_accum()
[all …]
H A Dnet.h80 u8 deny; member
/linux/Documentation/admin-guide/cgroup-v1/
H A Ddevices.rst25 devices.deny. For instance::
32 echo a > /sys/fs/cgroup/1/devices.deny
62 a cgroup's devices.deny file, all its children will have that entry removed
75 B deny "c 1:3 rwm", "c 116:2 rwm", "b 3:* rwm"
79 # echo "c 116:* r" > A/devices.deny
120 Allowing or denying all by writing 'a' to devices.allow or devices.deny will
/linux/rust/zerocopy-derive/
H A Dlib.rs20 #![deny(renamed_and_removed_lints)]
21 #![deny(
31 #![deny(
H A Dutil.rs751 #[deny(ambiguous_associated_items)] in const_block()
/linux/tools/testing/selftests/bpf/
H A DDENYLIST.riscv641 # riscv64 deny list for BPF CI and local vmtest
H A DREADME.rst32 deny list file, located at ``tools/testing/selftests/bpf/DENYLIST.<arch>``, can
55 that deny lists are not automatically honored.
/linux/drivers/gpu/drm/xe/
H A Dxe_reg_whitelist.c305 bool deny; in xe_reg_whitelist_print_entry() local
307 deny = val & RING_FORCE_TO_NONPRIV_DENY; in xe_reg_whitelist_print_entry()
338 deny ? "deny" : "allow", in xe_reg_whitelist_print_entry()
/linux/security/apparmor/
H A Dlib.c370 perms->complain |= ~(perms->allow | perms->deny); in aa_apply_modes_to_perms()
372 perms->prompt |= ~(perms->allow | perms->deny); in aa_apply_modes_to_perms()
430 u32 denied = request & (~perms->allow | perms->deny); in aa_check_perms()
H A Dnet.c390 if (rules->secmark[i].deny) in aa_secmark_perm()
391 perms.deny = ALL_PERMS_MASK; in aa_secmark_perm()
H A Dpolicy_unpack.c640 if (!unpack_u8(e, &rules->secmark[i].deny, NULL)) in unpack_secmark()
910 aa_unpack_u32(e, &perm->deny, NULL) && in unpack_perm()
1499 if (perm->allow & perm->deny) in verify_perm()
1503 if (perm->cond & (perm->allow | perm->deny)) in verify_perm()
1507 if (perm->complain & (perm->allow | perm->deny)) in verify_perm()
1509 if (perm->prompt & (perm->allow | perm->deny)) in verify_perm()
H A Dpolicy_compat.c270 state, table[state].allow, table[state].deny, in compute_perms()
H A Dfile.c118 complain |= ~(perms->allow | perms->deny); in aa_audit_file()
/linux/Documentation/ABI/stable/
H A Do2cb7 and can be written into with the strings "allow", "deny", or
/linux/Documentation/ABI/obsolete/
H A Do2cb7 and can be written into with the strings "allow", "deny", or
/linux/tools/testing/selftests/net/tcp_ao/
H A DMakefile4 TEST_BOTH_AF += connect-deny
/linux/Documentation/userspace-api/
H A Dcheck_exec.rst96 should always deny such execution if ``SECBIT_EXEC_DENY_INTERACTIVE`` is set.
127 Always interpret scripts, but deny arbitrary user commands.
136 Deny script interpretation if they are not executable, and also deny
/linux/fs/nfsd/
H A Dnfs4state.c513 set_deny(u32 deny, struct nfs4_ol_stateid *stp) in set_deny() argument
515 unsigned char mask = 1 << deny; in set_deny()
517 WARN_ON_ONCE(deny > NFS4_SHARE_DENY_BOTH); in set_deny()
523 clear_deny(u32 deny, struct nfs4_ol_stateid *stp) in clear_deny() argument
525 unsigned char mask = 1 << deny; in clear_deny()
527 WARN_ON_ONCE(deny > NFS4_SHARE_DENY_BOTH); in clear_deny()
533 test_deny(u32 deny, struct nfs4_ol_stateid *stp) in test_deny() argument
535 unsigned char mask = 1 << deny; in test_deny()
820 static __be32 nfs4_file_check_deny(struct nfs4_file *fp, u32 deny) in nfs4_file_check_deny() argument
823 if (deny) { in nfs4_file_check_deny()
[all …]
/linux/security/selinux/
H A DKconfig34 kernel will start in permissive mode (log everything, deny nothing)
/linux/Documentation/usb/
H A Dauthorization.rst98 There is a similar approach to allow or deny specific USB interfaces.
/linux/Documentation/bpf/
H A Dsigning.rst243 fires. It is the primary deny point.
307 bpf_ringbuf_submit(d, 0); /* record allow *and* deny */
377 Putting them together: to *require* verified BPF, deny at the admission hook
381 a deny-by-default admission policy needs no second enforcement point. Use
H A Dprog_cgroup_sysctl.rst100 the result to make decision whether to allow or deny access to sysctl.
/linux/rust/syn/
H A Dlib.rs256 #![deny(unsafe_op_in_unsafe_fn)]
/linux/rust/zerocopy/src/
H A Dlib.rs227 #![deny(renamed_and_removed_lints)]
228 #![deny(
256 deny(fuzzy_provenance_casts, lossy_provenance_casts)
258 #![deny(
294 #![deny(
/linux/rust/proc-macro2/
H A Dlib.rs97 #![deny(unsafe_op_in_unsafe_fn)]

12