Searched refs:unconfined (Results 1 – 7 of 7) sorted by relevance
63 struct aa_profile *unconfined; member82 #define ns_unconfined(NS) (&(NS)->unconfined->label)113 aa_get_profile(ns->unconfined); in aa_get_ns()127 aa_put_profile(ns->unconfined); in aa_put_ns()
122 ns->unconfined = alloc_unconfined("unconfined"); in alloc_ns()123 if (!ns->unconfined) in alloc_ns()126 ns->unconfined->ns = ns; in alloc_ns()157 ns->unconfined->ns = NULL; in aa_free_ns()158 aa_free_profile(ns->unconfined); in aa_free_ns()379 root_ns->unconfined->ns = aa_get_ns(root_ns); in aa_alloc_root_ns()
70 if (unconfined(label) || (labels_ns(old) != labels_ns(label))) in aa_replace_current_label()248 if (profile_unconfined(tracee) || unconfined(tracer) || in profile_tracee_perm()
160 if (ctx->label != kernel_t && !unconfined(label)) { in aa_label_sk_perm()209 label = aa_label_strn_parse(&root_ns->unconfined->label, in apparmor_secmark_init()
597 if (unconfined(label) || unconfined(flabel) || in aa_file_perm()
309 unconfined856 Another feature of bringup mode is the "unconfined" option. Writing857 a label to /sys/fs/smackfs/unconfined makes subjects with that label859 all subjects. Any access that is granted because a label is unconfined
338 …=0 tty=pts0 ses=2 comm="ld-linux.so" exe="/tmp/ipe-test/lib/ld-linux.so" subj=unconfined key=(null)342 …test" exe="/root/overlake_test/upstream_test/vol_fsverity/bin/mmap_test" subj=unconfined key=(null)