Home
last modified time | relevance | path

Searched refs:unconfined (Results 1 – 7 of 7) sorted by relevance

/linux/security/apparmor/include/
H A Dpolicy_ns.h63 struct aa_profile *unconfined; member
82 #define ns_unconfined(NS) (&(NS)->unconfined->label)
113 aa_get_profile(ns->unconfined); in aa_get_ns()
127 aa_put_profile(ns->unconfined); in aa_put_ns()
/linux/security/apparmor/
H A Dpolicy_ns.c122 ns->unconfined = alloc_unconfined("unconfined"); in alloc_ns()
123 if (!ns->unconfined) in alloc_ns()
126 ns->unconfined->ns = ns; in alloc_ns()
157 ns->unconfined->ns = NULL; in aa_free_ns()
158 aa_free_profile(ns->unconfined); in aa_free_ns()
379 root_ns->unconfined->ns = aa_get_ns(root_ns); in aa_alloc_root_ns()
H A Dtask.c70 if (unconfined(label) || (labels_ns(old) != labels_ns(label))) in aa_replace_current_label()
248 if (profile_unconfined(tracee) || unconfined(tracer) || in profile_tracee_perm()
H A Dnet.c160 if (ctx->label != kernel_t && !unconfined(label)) { in aa_label_sk_perm()
209 label = aa_label_strn_parse(&root_ns->unconfined->label, in apparmor_secmark_init()
H A Dfile.c597 if (unconfined(label) || unconfined(flabel) || in aa_file_perm()
/linux/Documentation/admin-guide/LSM/
H A DSmack.rst309 unconfined
856 Another feature of bringup mode is the "unconfined" option. Writing
857 a label to /sys/fs/smackfs/unconfined makes subjects with that label
859 all subjects. Any access that is granted because a label is unconfined
H A Dipe.rst338 …=0 tty=pts0 ses=2 comm="ld-linux.so" exe="/tmp/ipe-test/lib/ld-linux.so" subj=unconfined key=(null)
342 …test" exe="/root/overlake_test/upstream_test/vol_fsverity/bin/mmap_test" subj=unconfined key=(null)