| /linux/kernel/bpf/ |
| H A D | token.c | 19 struct user_namespace *userns; in bpf_token_capable() local
22 userns = token ? token->userns : &init_user_ns; in bpf_token_capable()
23 if (!bpf_ns_capable(userns, cap)) in bpf_token_capable()
38 put_user_ns(token->userns); in bpf_token_free()
116 struct user_namespace *userns; in bpf_token_create() local
138 userns = sb->s_user_ns; in bpf_token_create()
144 if (current_user_ns() != userns) in bpf_token_create()
146 if (!ns_capable(userns, CAP_BPF)) in bpf_token_create()
182 token->userns = userns; in bpf_token_create()
192 get_user_ns(token->userns); in bpf_token_create()
|
| /linux/fs/nfs/ |
| H A D | nfs3xdr.c | 534 struct user_namespace *userns) in encode_sattr3() argument
568 *p++ = cpu_to_be32(from_kuid_munged(userns, attr->ia_uid)); in encode_sattr3()
574 *p++ = cpu_to_be32(from_kgid_munged(userns, attr->ia_gid)); in encode_sattr3()
621 struct user_namespace *userns) in decode_fattr3() argument
634 fattr->uid = make_kuid(userns, be32_to_cpup(p++)); in decode_fattr3()
637 fattr->gid = make_kgid(userns, be32_to_cpup(p++)); in decode_fattr3()
675 struct user_namespace *userns) in decode_post_op_attr() argument
683 return decode_fattr3(xdr, fattr, userns); in decode_post_op_attr()
745 struct user_namespace *userns) in decode_wcc_data() argument
752 error = decode_post_op_attr(xdr, fattr, userns); in decode_wcc_data()
1017 encode_createhow3(struct xdr_stream * xdr,const struct nfs3_createargs * args,struct user_namespace * userns) encode_createhow3() argument
1076 encode_symlinkdata3(struct xdr_stream * xdr,const void * data,struct user_namespace * userns) encode_symlinkdata3() argument
1121 encode_devicedata3(struct xdr_stream * xdr,const struct nfs3_mknodargs * args,struct user_namespace * userns) encode_devicedata3() argument
1129 encode_mknoddata3(struct xdr_stream * xdr,const struct nfs3_mknodargs * args,struct user_namespace * userns) encode_mknoddata3() argument
1472 struct user_namespace *userns = rpc_rqst_userns(req); nfs3_xdr_dec_lookup3res() local
1753 decode_create3resok(struct xdr_stream * xdr,struct nfs3_diropres * result,struct user_namespace * userns) decode_create3resok() argument
1778 struct user_namespace *userns = rpc_rqst_userns(req); nfs3_xdr_dec_create3res() local
1862 struct user_namespace *userns = rpc_rqst_userns(req); nfs3_xdr_dec_rename3res() local
1907 struct user_namespace *userns = rpc_rqst_userns(req); nfs3_xdr_dec_link3res() local
1967 struct user_namespace *userns = rpc_userns(entry->server->client); nfs3_decode_dirent() local
2065 decode_readdir3resok(struct xdr_stream * xdr,struct nfs3_readdirres * result,struct user_namespace * userns) decode_readdir3resok() argument
2357 decode_getacl3resok(struct xdr_stream * xdr,struct nfs3_getaclres * result,struct user_namespace * userns) decode_getacl3resok() argument
[all...] |
| H A D | nfs2xdr.c | 263 struct user_namespace *userns) in decode_fattr() argument
278 fattr->uid = make_kuid(userns, be32_to_cpup(p++)); in decode_fattr()
281 fattr->gid = make_kgid(userns, be32_to_cpup(p++)); in decode_fattr()
337 struct user_namespace *userns) in encode_sattr() argument
348 *p++ = cpu_to_be32(from_kuid_munged(userns, attr->ia_uid)); in encode_sattr()
352 *p++ = cpu_to_be32(from_kgid_munged(userns, attr->ia_gid)); in encode_sattr()
463 struct user_namespace *userns) in decode_attrstat() argument
475 error = decode_fattr(xdr, result, userns); in decode_attrstat()
511 struct user_namespace *userns) in decode_diropok() argument
518 error = decode_fattr(xdr, result->fattr, userns); in decode_diropok()
[all …]
|
| /linux/net/sunrpc/ |
| H A D | auth_unix.c | 118 struct user_namespace *userns = clnt->cl_cred ? in unx_marshal() local
135 *p++ = cpu_to_be32(from_kuid_munged(userns, cred->cr_cred->fsuid)); in unx_marshal()
136 *p++ = cpu_to_be32(from_kgid_munged(userns, cred->cr_cred->fsgid)); in unx_marshal()
141 *p++ = cpu_to_be32(from_kgid_munged(userns, gi->gid[i])); in unx_marshal()
|
| H A D | svcauth.c | 190 struct user_namespace *userns = clnt->cl_cred ? in svcauth_map_clnt_to_svc_cred_local() local
195 svc->cr_uid = KUIDT_INIT(from_kuid_munged(userns, cred->fsuid)); in svcauth_map_clnt_to_svc_cred_local()
196 svc->cr_gid = KGIDT_INIT(from_kgid_munged(userns, cred->fsgid)); in svcauth_map_clnt_to_svc_cred_local()
|
| H A D | svcauth_unix.c | 1190 struct user_namespace *userns;
1216 userns = (rqstp->rq_xprt && rqstp->rq_xprt->xpt_cred) ?
1220 cred->cr_uid = make_kuid(userns, i);
1223 cred->cr_gid = make_kgid(userns, i);
1236 kgid_t kgid = make_kgid(userns, be32_to_cpup(p++));
921 struct user_namespace *userns; svcauth_unix_accept() local
|
| /linux/tools/testing/selftests/rlimits/ |
| H A D | .gitignore | 2 rlimits-per-userns
|
| H A D | Makefile | 4 TEST_GEN_PROGS := rlimits-per-userns
|
| /linux/fs/nfsd/ |
| H A D | export.c | 2129 struct user_namespace *userns = m->file->f_cred->user_ns;
2134 if (!uid_eq(anonu, make_kuid(userns, (uid_t)-2)) &&
2135 !uid_eq(anonu, make_kuid(userns, 0x10000-2)))
2136 seq_printf(m, ",anonuid=%u", from_kuid_munged(userns, anonu));
2137 if (!gid_eq(anong, make_kgid(userns, (gid_t)-2)) &&
2138 !gid_eq(anong, make_kgid(userns, 0x10000-2)))
2139 seq_printf(m, ",anongid=%u", from_kgid_munged(userns, anong));
1438 struct user_namespace *userns = m->file->f_cred->user_ns; exp_flags() local
|
| H A D | nfs4xdr.c | 824 struct user_namespace *userns = nfsd_user_namespace(argp->rqstp); in nfsd4_decode_authsys_parms() local
826 kuid_t kuid = make_kuid(userns, uid); in nfsd4_decode_authsys_parms()
827 kgid_t kgid = make_kgid(userns, gid); in nfsd4_decode_authsys_parms()
|
| /linux/fs/ |
| H A D | posix_acl.c | 751 * @userns: the filesystem's idmapping
761 * in ACL_{GROUP,USER} entries into idmapping in @userns.
773 struct posix_acl *posix_acl_from_xattr(struct user_namespace *userns, in posix_acl_from_xattr() argument
805 acl_e->e_uid = make_kuid(userns, in posix_acl_from_xattr()
811 acl_e->e_gid = make_kgid(userns, in posix_acl_from_xattr()
|
| /linux/net/sunrpc/auth_gss/ |
| H A D | auth_gss.c | 410 struct user_namespace *userns = cred->user_ns; in gss_encode_v0_msg() local
412 uid_t uid = from_kuid_munged(userns, gss_msg->uid); in gss_encode_v0_msg()
437 struct user_namespace *userns = cred->user_ns; in gss_encode_v1_msg() local
444 from_kuid_munged(userns, gss_msg->uid)); in gss_encode_v1_msg()
|
| /linux/security/apparmor/ |
| H A D | policy.c | 871 struct user_namespace *userns, int cap) in policy_ns_capable()
876 err = cap_capable(subj_cred, userns, cap, CAP_OPT_NONE);
961 /* don't allow crossing userns for now */ in is_subset_of_obj_privilege()
864 policy_ns_capable(const struct cred * subj_cred,struct aa_label * label,struct user_namespace * userns,int cap) policy_ns_capable() argument
|
| /linux/Documentation/filesystems/fuse/ |
| H A D | fuse.rst | 317 reason 'allow_other' restricts access to users in the same userns
|
| /linux/include/linux/ |
| H A D | bpf.h | 2040 struct user_namespace *userns;
1926 struct user_namespace *userns; global() member
|
| /linux/security/selinux/ |
| H A D | hooks.c | 7358 bool initns = (token->userns == &init_user_ns); in selinux_bpf_token_capable()
|
| /linux/Documentation/admin-guide/ |
| H A D | cgroup-v2.rst | 3171 namespace's userns
|