| /linux/security/apparmor/include/ |
| H A D | file.h | 24 #define mask_mode_t(X) (X & (MAY_EXEC | MAY_WRITE | MAY_READ | MAY_APPEND)) 26 #define AA_AUDIT_FILE_MASK (MAY_READ | MAY_WRITE | MAY_EXEC | MAY_APPEND |\
|
| H A D | perms.h | 16 #define AA_MAY_EXEC MAY_EXEC
|
| /linux/security/apparmor/ |
| H A D | domain.c | 350 if (!(perms->allow & MAY_EXEC)) { in aa_xattrs_match() 436 if (perms->allow & MAY_EXEC) { in find_attach() 709 perms.audit |= MAY_EXEC; in profile_transition() 710 perms.allow |= MAY_EXEC; in profile_transition() 713 OP_EXEC, MAY_EXEC, name, target, new, cond->uid, in profile_transition() 726 if (perms.allow & MAY_EXEC) { in profile_transition() 737 perms.audit |= MAY_EXEC; in profile_transition() 748 perms.allow &= ~MAY_EXEC; in profile_transition() 787 aa_audit_file(subj_cred, profile, &perms, OP_EXEC, MAY_EXEC, name, in profile_transition() 1103 OP_EXEC, MAY_EXEC, in apparmor_bprm_creds_for_exec()
|
| H A D | file.c | 401 } else if ((lperms.allow & MAY_EXEC) && in profile_path_link() 403 lperms.allow &= ~MAY_EXEC; in profile_path_link() 404 request |= MAY_EXEC; in profile_path_link()
|
| H A D | lsm.c | 482 fctx->allow = MAY_EXEC | MAY_READ | AA_EXEC_MMAP; in apparmor_file_open()
|
| /linux/security/integrity/ima/ |
| H A D | ima_main.c | 516 0, MAY_EXEC, MMAP_CHECK_REQPROT, 0, in ima_file_mmap() 524 0, MAY_EXEC, MMAP_CHECK, 0, false); in ima_file_mmap() 565 current_cred(), &prop, MAY_EXEC, MMAP_CHECK, in ima_file_mprotect() 568 current_cred(), &prop, MAY_EXEC, in ima_file_mprotect() 608 &prop, NULL, 0, MAY_EXEC, BPRM_CHECK, 0, in ima_bprm_check() 639 0, MAY_EXEC, CREDS_CHECK, 0, false); in ima_creds_check() 686 mask & (MAY_READ | MAY_WRITE | MAY_EXEC | in ima_file_check()
|
| H A D | ima_policy.c | 175 {.action = MEASURE, .func = MMAP_CHECK, .mask = MAY_EXEC, 177 {.action = MEASURE, .func = BPRM_CHECK, .mask = MAY_EXEC, 187 {.action = MEASURE, .func = MMAP_CHECK, .mask = MAY_EXEC, 189 {.action = MEASURE, .func = BPRM_CHECK, .mask = MAY_EXEC, 1594 entry->mask = MAY_EXEC; in ima_parse_rule() 2170 if (entry->mask & MAY_EXEC) in ima_policy_show()
|
| /linux/fs/afs/ |
| H A D | security.c | 474 if (mask & (MAY_EXEC | MAY_READ | MAY_CHDIR)) { in afs_permission() 486 if ((mask & MAY_EXEC) && !(inode->i_mode & S_IXUSR)) in afs_permission() 488 if (mask & (MAY_EXEC | MAY_READ)) { in afs_permission()
|
| /linux/fs/coda/ |
| H A D | pioctl.c | 47 return (mask & MAY_EXEC) ? -EACCES : 0; in coda_ioctl_permission()
|
| /linux/Documentation/ABI/testing/ |
| H A D | ima_policy | 41 [[^]MAY_EXEC] 116 measure func=FILE_MMAP mask=MAY_EXEC
|
| /linux/fs/configfs/ |
| H A D | symlink.c | 209 MAY_WRITE | MAY_EXEC); in configfs_symlink()
|
| /linux/security/smack/ |
| H A D | smack.h | 249 #define MAY_ANYREAD (MAY_READ | MAY_EXEC)
|
| H A D | smack_access.c | 295 if (access & MAY_EXEC) in smack_str_from_perm()
|
| H A D | smack_lsm.c | 1243 mask &= (MAY_READ|MAY_WRITE|MAY_EXEC|MAY_APPEND); in smack_inode_permission() 3129 may |= MAY_EXEC;
|
| H A D | smackfs.c | 290 perm |= MAY_EXEC; in smk_perm_from_str()
|
| /linux/fs/ |
| H A D | namei.c | 548 mask &= MAY_READ | MAY_WRITE | MAY_EXEC; in generic_permission() 558 if (!(mask & MAY_EXEC) || (inode->i_mode & S_IXUGO)) in generic_permission() 690 mask |= MAY_EXEC; in lookup_inode_permission_may_exec() 3121 return inode_permission(idmap, base->d_inode, MAY_EXEC); in lookup_one_common() 3697 error = inode_permission(idmap, dir, MAY_WRITE | MAY_EXEC); in may_delete_dentry() 3742 return inode_permission(idmap, dir, MAY_WRITE | MAY_EXEC); in may_create_dentry() 4247 if (acc_mode & MAY_EXEC) in may_open() 4257 if (acc_mode & MAY_EXEC) in may_open() 4262 if ((acc_mode & MAY_EXEC) && path_noexec(path)) in may_open() 4327 MAY_WRITE | MAY_EXEC); in may_o_create() [all …]
|
| H A D | exec.c | 775 .acc_mode = MAY_EXEC, in do_open_execat() 1671 err = inode_permission(idmap, inode, MAY_EXEC); in bprm_fill_uid()
|
| H A D | posix_acl.c | 390 want &= MAY_READ | MAY_WRITE | MAY_EXEC; in posix_acl_permission()
|
| /linux/fs/nfs/ |
| H A D | dir.c | 3291 mask |= MAY_EXEC; in nfs_access_calc_mask() 3296 mask |= MAY_EXEC; in nfs_access_calc_mask() 3347 if ((mask & ~cache_mask & (MAY_READ | MAY_WRITE | MAY_EXEC)) != 0) in nfs_do_access() 3360 mask = MAY_EXEC; in nfs_open_permission_mask() 3405 if ((mask & (MAY_READ | MAY_WRITE | MAY_EXEC)) == 0) in nfs_permission() 3434 if (!res && (mask & MAY_EXEC)) in nfs_permission()
|
| /linux/fs/nfsd/ |
| H A D | nfsfh.c | 47 d_inode(parent), MAY_EXEC); in nfsd_acceptable()
|
| H A D | vfs.c | 2904 acc & (MAY_READ | MAY_WRITE | MAY_EXEC)); in nfsd_permission() 2910 err = inode_permission(&nop_mnt_idmap, inode, MAY_EXEC); in nfsd_permission()
|
| /linux/fs/smb/server/ |
| H A D | vfs.c | 132 if (!inode_permission(idmap, d_inode(dentry), MAY_OPEN | MAY_EXEC)) in ksmbd_vfs_query_maximal_access() 135 if (!inode_permission(idmap, d_inode(dentry->d_parent), MAY_EXEC | MAY_WRITE)) in ksmbd_vfs_query_maximal_access()
|
| /linux/security/selinux/ |
| H A D | hooks.c | 2015 if (mask & MAY_EXEC) in file_mask_to_av() 2026 if (mask & MAY_EXEC) in file_mask_to_av() 3263 mask = requested & (MAY_READ|MAY_WRITE|MAY_EXEC|MAY_APPEND); in selinux_inode_permission()
|
| /linux/fs/btrfs/ |
| H A D | ioctl.c | 1825 MAY_READ | MAY_EXEC); in btrfs_search_path_in_tree_user() 2412 ret = inode_permission(idmap, inode, MAY_WRITE | MAY_EXEC); in btrfs_ioctl_snap_destroy()
|
| /linux/include/linux/ |
| H A D | fs.h | 92 #define MAY_EXEC 0x00000001 macro
|