| /linux/kernel/bpf/ |
| H A D | token.c | 19 struct user_namespace *userns; in bpf_token_capable() local
22 userns = token ? token->userns : &init_user_ns; in bpf_token_capable()
23 if (!bpf_ns_capable(userns, cap)) in bpf_token_capable()
38 put_user_ns(token->userns); in bpf_token_free()
116 struct user_namespace *userns; in bpf_token_create() local
138 userns = sb->s_user_ns; in bpf_token_create()
144 if (current_user_ns() != userns) in bpf_token_create()
146 if (!ns_capable(userns, CAP_BPF)) in bpf_token_create()
182 token->userns = userns; in bpf_token_create()
192 get_user_ns(token->userns); in bpf_token_create()
|
| /linux/fs/nfs/ |
| H A D | nfs2xdr.c | 263 struct user_namespace *userns) in decode_fattr() argument
278 fattr->uid = make_kuid(userns, be32_to_cpup(p++)); in decode_fattr()
281 fattr->gid = make_kgid(userns, be32_to_cpup(p++)); in decode_fattr()
337 struct user_namespace *userns) in encode_sattr() argument
348 *p++ = cpu_to_be32(from_kuid_munged(userns, attr->ia_uid)); in encode_sattr()
352 *p++ = cpu_to_be32(from_kgid_munged(userns, attr->ia_gid)); in encode_sattr()
463 struct user_namespace *userns) in decode_attrstat() argument
475 error = decode_fattr(xdr, result, userns); in decode_attrstat()
511 struct user_namespace *userns) in decode_diropok() argument
518 error = decode_fattr(xdr, result->fattr, userns); in decode_diropok()
[all …]
|
| /linux/net/sunrpc/ |
| H A D | auth_unix.c | 118 struct user_namespace *userns = clnt->cl_cred ? in unx_marshal() local
135 *p++ = cpu_to_be32(from_kuid_munged(userns, cred->cr_cred->fsuid)); in unx_marshal()
136 *p++ = cpu_to_be32(from_kgid_munged(userns, cred->cr_cred->fsgid)); in unx_marshal()
141 *p++ = cpu_to_be32(from_kgid_munged(userns, gi->gid[i])); in unx_marshal()
|
| H A D | svcauth.c | 190 struct user_namespace *userns = clnt->cl_cred ? in svcauth_map_clnt_to_svc_cred_local() local
195 svc->cr_uid = KUIDT_INIT(from_kuid_munged(userns, cred->fsuid)); in svcauth_map_clnt_to_svc_cred_local()
196 svc->cr_gid = KGIDT_INIT(from_kgid_munged(userns, cred->fsgid)); in svcauth_map_clnt_to_svc_cred_local()
|
| H A D | svcauth_unix.c | 1190 struct user_namespace *userns; in svcauth_unix_accept() local
1216 userns = (rqstp->rq_xprt && rqstp->rq_xprt->xpt_cred) ? in svcauth_unix_accept()
1220 cred->cr_uid = make_kuid(userns, i); in svcauth_unix_accept()
1223 cred->cr_gid = make_kgid(userns, i); in svcauth_unix_accept()
1236 kgid_t kgid = make_kgid(userns, be32_to_cpup(p++)); in svcauth_unix_accept()
|
| /linux/tools/testing/selftests/rlimits/ |
| H A D | .gitignore | 2 rlimits-per-userns
|
| H A D | Makefile | 4 TEST_GEN_PROGS := rlimits-per-userns
|
| /linux/fs/nfsd/ |
| H A D | nfsxdr.c | 231 struct user_namespace *userns = nfsd_user_namespace(rqstp); in svcxdr_encode_fattr() local
245 *p++ = cpu_to_be32((u32)from_kuid_munged(userns, stat->uid)); in svcxdr_encode_fattr()
246 *p++ = cpu_to_be32((u32)from_kgid_munged(userns, stat->gid)); in svcxdr_encode_fattr()
|
| H A D | nfs3xdr.c | 338 struct user_namespace *userns = nfsd_user_namespace(rqstp); in svcxdr_encode_fattr3() local
349 *p++ = cpu_to_be32((u32)from_kuid_munged(userns, stat->uid)); in svcxdr_encode_fattr3()
350 *p++ = cpu_to_be32((u32)from_kgid_munged(userns, stat->gid)); in svcxdr_encode_fattr3()
|
| H A D | nfs4xdr.c | 839 struct user_namespace *userns = nfsd_user_namespace(argp->rqstp); in nfsd4_decode_authsys_parms() local
841 kuid_t kuid = make_kuid(userns, uid); in nfsd4_decode_authsys_parms()
842 kgid_t kgid = make_kgid(userns, gid); in nfsd4_decode_authsys_parms()
|
| /linux/fs/ |
| H A D | posix_acl.c | 778 struct posix_acl *posix_acl_from_xattr(struct user_namespace *userns, in posix_acl_from_xattr() argument
810 acl_e->e_uid = make_kuid(userns, in posix_acl_from_xattr()
816 acl_e->e_gid = make_kgid(userns, in posix_acl_from_xattr()
|
| /linux/tools/testing/selftests/drivers/net/lib/py/ |
| H A D | env.py | 378 userns=False, **kwargs): argument
380 self._userns = userns
|
| /linux/net/sunrpc/auth_gss/ |
| H A D | auth_gss.c | 410 struct user_namespace *userns = cred->user_ns; in gss_encode_v0_msg() local
412 uid_t uid = from_kuid_munged(userns, gss_msg->uid); in gss_encode_v0_msg()
437 struct user_namespace *userns = cred->user_ns; in gss_encode_v1_msg() local
444 from_kuid_munged(userns, gss_msg->uid)); in gss_encode_v1_msg()
|
| /linux/security/apparmor/ |
| H A D | policy.c | 884 struct user_namespace *userns, int cap) in policy_ns_capable() argument
889 err = cap_capable(subj_cred, userns, cap, CAP_OPT_NONE); in policy_ns_capable()
|
| /linux/Documentation/filesystems/fuse/ |
| H A D | fuse.rst | 317 reason 'allow_other' restricts access to users in the same userns
|
| /linux/include/linux/ |
| H A D | bpf.h | 2039 struct user_namespace *userns; member
|
| /linux/security/selinux/ |
| H A D | hooks.c | 7389 bool initns = (token->userns == &init_user_ns); in selinux_bpf_token_capable()
|