Home
last modified time | relevance | path

Searched refs:ruleset (Results 1 – 25 of 40) sorted by relevance

12

/linux/drivers/net/ethernet/marvell/prestera/
H A Dprestera_acl.c140 struct prestera_acl_ruleset *ruleset; in prestera_acl_ruleset_create() local
147 ruleset = kzalloc_obj(*ruleset); in prestera_acl_ruleset_create()
148 if (!ruleset) in prestera_acl_ruleset_create()
151 ruleset->acl = acl; in prestera_acl_ruleset_create()
152 ruleset->ingress = block->ingress; in prestera_acl_ruleset_create()
153 ruleset->ht_key.block = block; in prestera_acl_ruleset_create()
154 ruleset->ht_key.chain_index = chain_index; in prestera_acl_ruleset_create()
155 refcount_set(&ruleset->refcount, 1); in prestera_acl_ruleset_create()
157 err = rhashtable_init(&ruleset->rule_ht, &prestera_acl_rule_ht_params); in prestera_acl_ruleset_create()
166 ruleset->pcl_id = PRESTERA_ACL_PCL_ID_MAKE((u8)uid, chain_index); in prestera_acl_ruleset_create()
[all …]
H A Dprestera_flower.c11 struct prestera_acl_ruleset *ruleset; member
19 prestera_acl_ruleset_put(template->ruleset); in prestera_flower_template_free()
39 struct prestera_acl_ruleset *ruleset; in prestera_flower_parse_goto_action() local
48 ruleset = prestera_acl_ruleset_get(block->sw->acl, block, in prestera_flower_parse_goto_action()
50 if (IS_ERR(ruleset)) in prestera_flower_parse_goto_action()
51 return PTR_ERR(ruleset); in prestera_flower_parse_goto_action()
54 rule->re_arg.jump.i.index = prestera_acl_ruleset_index_get(ruleset); in prestera_flower_parse_goto_action()
56 rule->jump_ruleset = ruleset; in prestera_flower_parse_goto_action()
407 struct prestera_acl_ruleset *ruleset; in prestera_flower_prio_get() local
409 ruleset = prestera_acl_ruleset_lookup(block->sw->acl, block, chain_index); in prestera_flower_prio_get()
[all …]
H A Dprestera_acl.h130 struct prestera_acl_ruleset *ruleset; member
156 prestera_acl_rule_create(struct prestera_acl_ruleset *ruleset,
162 prestera_acl_rule_lookup(struct prestera_acl_ruleset *ruleset,
188 int prestera_acl_ruleset_keymask_set(struct prestera_acl_ruleset *ruleset,
190 bool prestera_acl_ruleset_is_offload(struct prestera_acl_ruleset *ruleset);
191 int prestera_acl_ruleset_offload(struct prestera_acl_ruleset *ruleset);
192 void prestera_acl_ruleset_put(struct prestera_acl_ruleset *ruleset);
193 int prestera_acl_ruleset_bind(struct prestera_acl_ruleset *ruleset,
195 int prestera_acl_ruleset_unbind(struct prestera_acl_ruleset *ruleset,
197 u32 prestera_acl_ruleset_index_get(const struct prestera_acl_ruleset *ruleset);
[all …]
/linux/drivers/net/ethernet/mellanox/mlxsw/
H A Dspectrum_acl.c70 struct mlxsw_sp_acl_ruleset *ruleset; member
100 mlxsw_sp_acl_ruleset_is_singular(const struct mlxsw_sp_acl_ruleset *ruleset) in mlxsw_sp_acl_ruleset_is_singular() argument
102 /* We hold a reference on ruleset ourselves */ in mlxsw_sp_acl_ruleset_is_singular()
103 return refcount_read(&ruleset->ref_count) == 2; in mlxsw_sp_acl_ruleset_is_singular()
110 struct mlxsw_sp_acl_ruleset *ruleset = block->ruleset_zero; in mlxsw_sp_acl_ruleset_bind() local
111 const struct mlxsw_sp_acl_profile_ops *ops = ruleset->ht_key.ops; in mlxsw_sp_acl_ruleset_bind()
113 return ops->ruleset_bind(mlxsw_sp, ruleset->priv, in mlxsw_sp_acl_ruleset_bind()
121 struct mlxsw_sp_acl_ruleset *ruleset = block->ruleset_zero; in mlxsw_sp_acl_ruleset_unbind() local
122 const struct mlxsw_sp_acl_profile_ops *ops = ruleset->ht_key.ops; in mlxsw_sp_acl_ruleset_unbind()
124 ops->ruleset_unbind(mlxsw_sp, ruleset in mlxsw_sp_acl_ruleset_unbind()
130 mlxsw_sp_acl_ruleset_block_bind(struct mlxsw_sp * mlxsw_sp,struct mlxsw_sp_acl_ruleset * ruleset,struct mlxsw_sp_flow_block * block) mlxsw_sp_acl_ruleset_block_bind() argument
155 mlxsw_sp_acl_ruleset_block_unbind(struct mlxsw_sp * mlxsw_sp,struct mlxsw_sp_acl_ruleset * ruleset,struct mlxsw_sp_flow_block * block) mlxsw_sp_acl_ruleset_block_unbind() argument
172 struct mlxsw_sp_acl_ruleset *ruleset; mlxsw_sp_acl_ruleset_create() local
212 mlxsw_sp_acl_ruleset_destroy(struct mlxsw_sp * mlxsw_sp,struct mlxsw_sp_acl_ruleset * ruleset) mlxsw_sp_acl_ruleset_destroy() argument
224 mlxsw_sp_acl_ruleset_ref_inc(struct mlxsw_sp_acl_ruleset * ruleset) mlxsw_sp_acl_ruleset_ref_inc() argument
230 mlxsw_sp_acl_ruleset_ref_dec(struct mlxsw_sp * mlxsw_sp,struct mlxsw_sp_acl_ruleset * ruleset) mlxsw_sp_acl_ruleset_ref_dec() argument
259 struct mlxsw_sp_acl_ruleset *ruleset; mlxsw_sp_acl_ruleset_lookup() local
278 struct mlxsw_sp_acl_ruleset *ruleset; mlxsw_sp_acl_ruleset_get() local
294 mlxsw_sp_acl_ruleset_put(struct mlxsw_sp * mlxsw_sp,struct mlxsw_sp_acl_ruleset * ruleset) mlxsw_sp_acl_ruleset_put() argument
299 mlxsw_sp_acl_ruleset_group_id(struct mlxsw_sp_acl_ruleset * ruleset) mlxsw_sp_acl_ruleset_group_id() argument
306 mlxsw_sp_acl_ruleset_prio_get(struct mlxsw_sp_acl_ruleset * ruleset,unsigned int * p_min_prio,unsigned int * p_max_prio) mlxsw_sp_acl_ruleset_prio_get() argument
815 mlxsw_sp_acl_rule_create(struct mlxsw_sp * mlxsw_sp,struct mlxsw_sp_acl_ruleset * ruleset,unsigned long cookie,struct mlxsw_afa_block * afa_block,struct netlink_ext_ack * extack) mlxsw_sp_acl_rule_create() argument
852 struct mlxsw_sp_acl_ruleset *ruleset = rule->ruleset; mlxsw_sp_acl_rule_destroy() local
862 struct mlxsw_sp_acl_ruleset *ruleset = rule->ruleset; mlxsw_sp_acl_rule_add() local
906 struct mlxsw_sp_acl_ruleset *ruleset = rule->ruleset; mlxsw_sp_acl_rule_del() local
928 struct mlxsw_sp_acl_ruleset *ruleset = rule->ruleset; mlxsw_sp_acl_rule_action_replace() local
940 mlxsw_sp_acl_rule_lookup(struct mlxsw_sp * mlxsw_sp,struct mlxsw_sp_acl_ruleset * ruleset,unsigned long cookie) mlxsw_sp_acl_rule_lookup() argument
956 struct mlxsw_sp_acl_ruleset *ruleset = rule->ruleset; mlxsw_sp_acl_rule_activity_update() local
[all...]
H A Dspectrum_flower.c131 struct mlxsw_sp_acl_ruleset *ruleset; in mlxsw_sp_flower_parse_actions() local
134 ruleset = mlxsw_sp_acl_ruleset_lookup(mlxsw_sp, block, in mlxsw_sp_flower_parse_actions()
137 if (IS_ERR(ruleset)) in mlxsw_sp_flower_parse_actions()
138 return PTR_ERR(ruleset); in mlxsw_sp_flower_parse_actions()
140 group_id = mlxsw_sp_acl_ruleset_group_id(ruleset); in mlxsw_sp_flower_parse_actions()
745 struct mlxsw_sp_acl_ruleset *ruleset; in mlxsw_sp_flower_replace() local
753 ruleset = mlxsw_sp_acl_ruleset_get(mlxsw_sp, block, in mlxsw_sp_flower_replace()
756 if (IS_ERR(ruleset)) in mlxsw_sp_flower_replace()
757 return PTR_ERR(ruleset); in mlxsw_sp_flower_replace()
759 rule = mlxsw_sp_acl_rule_create(mlxsw_sp, ruleset, in mlxsw_sp_flower_replace()
795 struct mlxsw_sp_acl_ruleset *ruleset; mlxsw_sp_flower_destroy() local
818 struct mlxsw_sp_acl_ruleset *ruleset; mlxsw_sp_flower_stats() local
858 struct mlxsw_sp_acl_ruleset *ruleset; mlxsw_sp_flower_tmplt_create() local
879 struct mlxsw_sp_acl_ruleset *ruleset; mlxsw_sp_flower_tmplt_destroy() local
896 struct mlxsw_sp_acl_ruleset *ruleset; mlxsw_sp_flower_prio_get() local
[all...]
H A Dspectrum2_mr_tcam.c36 struct mlxsw_sp_acl_ruleset *ruleset) in mlxsw_sp2_mr_tcam_bind_group() argument
41 group_id = mlxsw_sp_acl_ruleset_group_id(ruleset); in mlxsw_sp2_mr_tcam_bind_group()
218 struct mlxsw_sp_acl_ruleset *ruleset; in mlxsw_sp2_mr_tcam_route_create() local
223 ruleset = mlxsw_sp2_mr_tcam_proto_ruleset(mr_tcam, key->proto); in mlxsw_sp2_mr_tcam_route_create()
224 if (WARN_ON(!ruleset)) in mlxsw_sp2_mr_tcam_route_create()
227 rule = mlxsw_sp_acl_rule_create(mlxsw_sp, ruleset, in mlxsw_sp2_mr_tcam_route_create()
251 struct mlxsw_sp_acl_ruleset *ruleset; in mlxsw_sp2_mr_tcam_route_destroy() local
254 ruleset = mlxsw_sp2_mr_tcam_proto_ruleset(mr_tcam, key->proto); in mlxsw_sp2_mr_tcam_route_destroy()
255 if (WARN_ON(!ruleset)) in mlxsw_sp2_mr_tcam_route_destroy()
258 rule = mlxsw_sp_acl_rule_lookup(mlxsw_sp, ruleset, in mlxsw_sp2_mr_tcam_route_destroy()
[all …]
H A Dspectrum_acl_tcam.c1696 struct mlxsw_sp_acl_tcam_flower_ruleset *ruleset = ruleset_priv; in mlxsw_sp_acl_tcam_flower_ruleset_add() local
1698 return mlxsw_sp_acl_tcam_vgroup_add(mlxsw_sp, tcam, &ruleset->vgroup, in mlxsw_sp_acl_tcam_flower_ruleset_add()
1709 struct mlxsw_sp_acl_tcam_flower_ruleset *ruleset = ruleset_priv; in mlxsw_sp_acl_tcam_flower_ruleset_del() local
1711 mlxsw_sp_acl_tcam_vgroup_del(&ruleset->vgroup); in mlxsw_sp_acl_tcam_flower_ruleset_del()
1720 struct mlxsw_sp_acl_tcam_flower_ruleset *ruleset = ruleset_priv; in mlxsw_sp_acl_tcam_flower_ruleset_bind() local
1722 return mlxsw_sp_acl_tcam_group_bind(mlxsw_sp, &ruleset->vgroup.group, in mlxsw_sp_acl_tcam_flower_ruleset_bind()
1732 struct mlxsw_sp_acl_tcam_flower_ruleset *ruleset = ruleset_priv; in mlxsw_sp_acl_tcam_flower_ruleset_unbind() local
1734 mlxsw_sp_acl_tcam_group_unbind(mlxsw_sp, &ruleset->vgroup.group, in mlxsw_sp_acl_tcam_flower_ruleset_unbind()
1741 struct mlxsw_sp_acl_tcam_flower_ruleset *ruleset = ruleset_priv; in mlxsw_sp_acl_tcam_flower_ruleset_group_id() local
1743 return mlxsw_sp_acl_tcam_group_id(&ruleset->vgroup.group); in mlxsw_sp_acl_tcam_flower_ruleset_group_id()
[all …]
/linux/security/landlock/
H A Dsyscalls.c38 #include "ruleset.h"
133 struct landlock_ruleset *ruleset = filp->private_data; in fop_dummy_read()
135 landlock_put_ruleset(ruleset); in fop_dummy_read()
155 * A ruleset file descriptor enables to build a ruleset by adding (i.e.
157 * reentrant design is also used in a read way to enforce the ruleset on the
178 * sys_landlock_create_ruleset - Create a new ruleset
181 * the new ruleset.
189 * This system call enables to create a new Landlock ruleset.
194 * Return: The ruleset fil
124 struct landlock_ruleset *ruleset = filp->private_data; fop_ruleset_release() local
200 struct landlock_ruleset *ruleset; SYSCALL_DEFINE3() local
267 struct landlock_ruleset *ruleset; get_ruleset_from_fd() local
314 add_rule_path_beneath(struct landlock_ruleset * const ruleset,const void __user * const rule_attr) add_rule_path_beneath() argument
352 add_rule_net_port(struct landlock_ruleset * ruleset,const void __user * const rule_attr) add_rule_net_port() argument
[all...]
H A Druleset.c296 int landlock_insert_rule(struct landlock_ruleset *const ruleset, in landlock_insert_rule() argument
313 lockdep_assert_held(&ruleset->lock); in landlock_insert_rule()
314 err = landlock_store_rule(&ruleset->rules, id, &layers, in landlock_insert_rule()
319 ruleset->version++; in landlock_insert_rule()
341 static void free_ruleset(struct landlock_ruleset *const ruleset) in free_ruleset() argument
344 trace_landlock_free_ruleset(ruleset); in free_ruleset()
345 landlock_free_rules(&ruleset->rules); in free_ruleset()
346 kfree(ruleset); in free_ruleset()
349 void landlock_put_ruleset(struct landlock_ruleset *const ruleset) in landlock_put_ruleset() argument
352 if (ruleset && refcount_dec_and_test(&ruleset->usage)) in landlock_put_ruleset()
[all …]
H A Druleset.h202 void landlock_put_ruleset(struct landlock_ruleset *const ruleset);
207 int landlock_insert_rule(struct landlock_ruleset *const ruleset,
245 static inline void landlock_get_ruleset(struct landlock_ruleset *const ruleset) in landlock_get_ruleset() argument
247 if (ruleset) in landlock_get_ruleset()
248 refcount_inc(&ruleset->usage); in landlock_get_ruleset()
H A Dnet.c25 int landlock_append_net_rule(struct landlock_ruleset *const ruleset, in landlock_append_net_rule() argument
38 access_rights |= LANDLOCK_MASK_ACCESS_NET & ~ruleset->handled_masks.net; in landlock_append_net_rule()
40 mutex_lock(&ruleset->lock); in landlock_append_net_rule()
41 err = landlock_insert_rule(ruleset, id, access_rights, flags); in landlock_append_net_rule()
50 trace_landlock_add_rule_net_port(ruleset, flags, access_rights, in landlock_append_net_rule()
52 mutex_unlock(&ruleset->lock); in landlock_append_net_rule()
H A Dnet.h12 #include "ruleset.h"
18 int landlock_append_net_rule(struct landlock_ruleset *const ruleset,
27 landlock_append_net_rule(struct landlock_ruleset *const ruleset, const u16 port, in landlock_append_net_rule()
26 landlock_append_net_rule(struct landlock_ruleset * const ruleset,const u16 port,access_mask_t access_rights) landlock_append_net_rule() argument
H A Ddomain.c435 struct landlock_ruleset *const ruleset) in landlock_merge_ruleset() argument
442 if (WARN_ON_ONCE(!ruleset)) in landlock_merge_ruleset()
445 lockdep_assert_held(&ruleset->lock); in landlock_merge_ruleset()
473 err = merge_ruleset(new_dom, ruleset); in landlock_merge_ruleset()
482 new_dom->hierarchy->quiet_masks = ruleset->quiet_masks; in landlock_merge_ruleset()
H A DMakefile7 ruleset.o \
H A Dfs.h21 #include "ruleset.h"
155 int landlock_append_fs_rule(struct landlock_ruleset *const ruleset,
/linux/include/trace/events/
H A Dlandlock.h341 TP_PROTO(const struct landlock_ruleset *ruleset),
343 TP_ARGS(ruleset),
354 __entry->ruleset_id = ruleset->id;
355 __entry->ruleset_version = ruleset->version;
356 __entry->handled_fs = ruleset->handled_masks.fs;
357 __entry->handled_net = ruleset->handled_masks.net;
358 __entry->scoped = ruleset->handled_masks.scope;
381 TP_PROTO(const struct landlock_ruleset *ruleset),
383 TP_ARGS(ruleset),
391 __entry->ruleset_id = ruleset->id;
[all …]
/linux/tools/testing/selftests/net/netfilter/
H A Dnft_queue.sh259 ip netns exec "$nsrouter" nft list ruleset
327 flush ruleset
372 flush ruleset
398 ip netns exec "$ns1" nft list ruleset
408 ip netns exec "$ns1" nft flush ruleset
452 flush ruleset
531 flush ruleset
606 flush ruleset
753 flush ruleset
802 flush ruleset
[all …]
H A Dnft_flowtable.sh507 ip netns exec "$nsr1" nft list ruleset
515 ip netns exec "$nsr1" nft list ruleset
551 ip netns exec "$nsr1" nft list ruleset
579 ip netns exec "$nsr1" nft list ruleset
631 ip netns exec "$nsr1" nft list ruleset
639 ip netns exec "$nsr1" nft list ruleset
691 ip netns exec "$nsr1" nft list ruleset
699 ip netns exec "$nsr1" nft list ruleset
745 ip netns exec "$nsr1" nft list ruleset
779 ip netns exec "$nsr1" nft list ruleset
[all …]
H A Dconntrack_vrf.sh84 # as decided by the first iteration of the ruleset.
122 ip netns exec "$ns0" nft list ruleset
141 flush ruleset
188 flush ruleset
H A Dbr_netfilter.sh39 ip netns exec "$ns0" nft list ruleset
56 ip netns exec "$ns0" nft list ruleset
135 echo "SKIP: could not add nftables ruleset"
/linux/Documentation/trace/
H A Devents-landlock.rst33 - ``landlock_create_ruleset``: a new ruleset is created
34 - ``landlock_add_rule_path_beneath``: a filesystem rule is added to a ruleset
35 - ``landlock_add_rule_net_port``: a network port rule is added to a ruleset
36 - ``landlock_create_domain``: a new domain is created from a ruleset
56 - ``landlock_free_ruleset``: a ruleset is freed
87 …cat-127 [...] landlock_create_ruleset: ruleset=195cc6b76.0 handled_fs=execute|write_file|read_file…
88 cat-127 [...] landlock_create_domain: domain=195cc6b7c parent=0 ruleset=195cc6b76.6
162 Syscall events include a ruleset version (``ruleset=<hex_id>.<version>``)
163 that tracks the number of rules added to the ruleset. The version is
/linux/tools/testing/selftests/net/ovpn/
H A Dtest-mark.sh78 ruleset
138 ruleset
/linux/include/linux/crush/
H A Dmapper.h14 extern int crush_find_rule(const struct crush_map *map, int ruleset, int type, int size);
/linux/security/safesetid/
H A Dsecurityfs.c267 … size_t len, loff_t *ppos, struct mutex *policy_update_lock, struct __rcu setid_ruleset* ruleset) in safesetid_file_read() argument
274 pol = rcu_dereference_protected(ruleset, lockdep_is_held(policy_update_lock)); in safesetid_file_read()
/linux/tools/testing/selftests/net/mptcp/
H A Dmptcp_connect.sh687 flush ruleset
713 ip netns exec "$listener_ns" nft flush ruleset
721 ip netns exec "$listener_ns" nft flush ruleset
737 ip netns exec "$listener_ns" nft flush ruleset

12