| /linux/security/loadpin/ |
| H A D | loadpin.c | 47 static int enforce = IS_ENABLED(CONFIG_SECURITY_LOADPIN_ENFORCE); variable
71 .data = &enforce,
118 if (enforce) { in loadpin_sb_free_security()
142 if (!enforce) { in loadpin_check()
174 if (unlikely(!enforce)) { in loadpin_check()
257 enforce ? "" : "not "); in loadpin_init()
439 module_param(enforce, int, 0);
440 MODULE_PARM_DESC(enforce, "Enforce module/firmware pinning");
|
| /linux/security/ipe/ |
| H A D | eval.c | 23 bool enforce = true; variable
378 if (!READ_ONCE(enforce)) in ipe_evaluate_event()
392 module_param(enforce, bool, 0400);
393 MODULE_PARM_DESC(enforce, "Start IPE in enforce or permissive mode");
|
| H A D | fs.c | 86 old_value = READ_ONCE(enforce); in setenforce()
93 WRITE_ONCE(enforce, new_value); in setenforce()
113 result = ((READ_ONCE(enforce)) ? "1" : "0"); in getenforce()
|
| H A D | eval.h | 19 extern bool enforce;
|
| H A D | audit.c | 146 op, audit_hook_names[ctx->hook], READ_ONCE(enforce), in ipe_audit_match()
260 * @new_enforce: The new value enforce to be set.
261 * @old_enforce: The old value currently in enforce.
|
| /linux/Documentation/admin-guide/LSM/ |
| H A D | LoadPin.rst | 9 and/or unchangeable filesystem to enforce module and firmware loading
14 "``loadpin.enforce``". By default, it is enabled, but can be disabled at
15 boot ("``loadpin.enforce=0``").
|
| H A D | ipe.rst | 39 checks, allowing IPE to enforce policies that trust files protected by
45 For the IPE policy, specifically, it grants the ability to enforce
235 are signed through the PKCS#7 message format to enforce some level of
299 only enforce the policy marked active. Note that only one policy can be active
334 The default mode is enforce, and can be changed via the kernel command
335 line parameter ``ipe.enforce=(0|1)``, or the securityfs node
336 ``/sys/kernel/security/ipe/enforce``.
|
| /linux/Documentation/userspace-api/ |
| H A D | check_exec.rst | 10 are intended for script interpreters and dynamic linkers to enforce a
31 set to 1 (i.e. always enforce restrictions).
75 Programs should only enforce consistent restrictions according to the
|
| /linux/Documentation/admin-guide/device-mapper/ |
| H A D | dm-ebs.rst | 48 offset 128 sectors, enforce 2KiB underlying device block size.
|
| /linux/Documentation/hwmon/ |
| H A D | occ.rst | 121 Maximum power cap that the OCC can enforce in
123 power[1-n]_cap_min Minimum power cap that the OCC can enforce in
|
| H A D | f71805f.rst | 160 enforce this limit though.
|
| /linux/Documentation/scsi/ |
| H A D | scsi.rst | 24 will enforce the correct ordering of loading and unloading modules in
|
| /linux/security/selinux/ |
| H A D | Kconfig | 38 /sys/fs/selinux/enforce.
|
| /linux/Documentation/mm/ |
| H A D | ksm.rst | 35 Every "chain" and all "dups" linked into a "chain" enforce the
|
| /linux/security/integrity/ |
| H A D | Kconfig | 83 The .machine keyring can be configured to enforce CA restriction
|
| /linux/Documentation/arch/arm64/ |
| H A D | cpu-hotplug.rst | 60 brought online. Firmware can enforce its policy via PSCI's return codes. e.g.
|
| /linux/fs/btrfs/ |
| H A D | qgroup.c | 3612 static int qgroup_reserve(struct btrfs_root *root, u64 num_bytes, bool enforce, in qgroup_reserve() argument
3629 enforce = false; in qgroup_reserve()
3643 if (enforce && !qgroup_check_limits(qgroup, num_bytes)) { in qgroup_reserve()
4515 enum btrfs_qgroup_rsv_type type, bool enforce) in btrfs_qgroup_reserve_meta() argument
4526 ret = qgroup_reserve(root, num_bytes, enforce, type); in btrfs_qgroup_reserve_meta()
4542 bool enforce, bool noflush) in btrfs_qgroup_reserve_meta_prealloc() argument
4547 BTRFS_QGROUP_RSV_META_PREALLOC, enforce); in btrfs_qgroup_reserve_meta_prealloc()
4555 BTRFS_QGROUP_RSV_META_PREALLOC, enforce); in btrfs_qgroup_reserve_meta_prealloc()
|
| /linux/Documentation/admin-guide/cgroup-v1/ |
| H A D | devices.rst | 8 Implement a cgroup to track and enforce open and mknod restrictions
|
| /linux/Documentation/process/ |
| H A D | kernel-enforcement-statement.rst | 11 Although there is a right to enforce the separate copyright interests in the
|
| /linux/Documentation/arch/riscv/ |
| H A D | cmodx.rst | 10 program must enforce its own synchronization with the unprivileged fence.i
|
| /linux/Documentation/bpf/ |
| H A D | graph_ds_impl.rst | 77 the same map_value and will enforce that the correct lock is held when
116 obvious. The verifier could enforce the same semantics as for ``bpf_obj_drop``,
|
| /linux/Documentation/arch/x86/ |
| H A D | xstate.rst | 27 enabling, the kernel can enforce userspace applications to have
|
| /linux/arch/arm64/boot/dts/rockchip/ |
| H A D | rk3588-jaguar-pre-ict-tester.dtso | 83 * issue. Therefore, let's enforce a pull-up (which is
|
| /linux/Documentation/arch/powerpc/ |
| H A D | dexcr.rst | 25 enforce aspects for the kernel and userspace.
|
| /linux/Documentation/edac/ |
| H A D | memory_repair.rst | 106 5. Drivers should enforce that live repair is safe. In systems where memory
|