| /linux/security/landlock/ |
| H A D | access.h | 37 typedef u32 access_mask_t; typedef 40 static_assert(BITS_PER_TYPE(access_mask_t) >= LANDLOCK_NUM_ACCESS_FS); 42 static_assert(BITS_PER_TYPE(access_mask_t) >= LANDLOCK_NUM_ACCESS_NET); 44 static_assert(BITS_PER_TYPE(access_mask_t) >= LANDLOCK_NUM_SCOPE); 46 static_assert(sizeof(unsigned long) >= sizeof(access_mask_t)); 50 access_mask_t fs : LANDLOCK_NUM_ACCESS_FS; 51 access_mask_t net : LANDLOCK_NUM_ACCESS_NET; 52 access_mask_t scope : LANDLOCK_NUM_SCOPE; 65 (BITS_PER_TYPE(access_mask_t) - LANDLOCK_NUM_ACCESS_MAX - \ 80 access_mask_t access : LANDLOCK_NUM_ACCESS_MAX; [all …]
|
| H A D | domain.h | 143 landlock_get_deny_masks(const access_mask_t all_existing_optional_access, 144 const access_mask_t optional_access, 148 const access_mask_t all_existing_optional_access, 252 static inline access_mask_t 261 static inline access_mask_t 268 static inline access_mask_t 315 access_mask_t 317 const access_mask_t access_request,
|
| H A D | ruleset.h | 46 access_mask_t access; 198 landlock_create_ruleset(const access_mask_t access_mask_fs, 199 const access_mask_t access_mask_net, 200 const access_mask_t scope_mask); 209 const access_mask_t access, const u32 flags);
|
| H A D | domain.c | 201 typedef access_mask_t 220 access_mask_t 222 const access_mask_t access_request, in landlock_init_layer_masks() 226 access_mask_t handled_accesses = 0; in landlock_init_layer_masks() 250 const access_mask_t handled = get_access_mask(domain, i); in landlock_init_layer_masks() 606 get_layer_deny_mask(const access_mask_t all_existing_optional_access, in get_layer_deny_mask() 640 const access_mask_t all_existing_optional_access, in landlock_get_quiet_optional_accesses() 652 BITS_PER_TYPE(access_mask_t)) { in landlock_get_quiet_optional_accesses() 690 landlock_get_deny_masks(const access_mask_t all_existing_optional_access, in landlock_get_deny_masks() 691 const access_mask_t optional_access, in landlock_get_deny_masks() [all …]
|
| H A D | ruleset.c | 35 landlock_create_ruleset(const access_mask_t fs_access_mask, in landlock_create_ruleset() 36 const access_mask_t net_access_mask, in landlock_create_ruleset() 37 const access_mask_t scope_mask) in landlock_create_ruleset() 63 const access_mask_t mask = fs_access_mask & in landlock_create_ruleset() 70 const access_mask_t mask = net_access_mask & in landlock_create_ruleset() 77 const access_mask_t mask = scope_mask & LANDLOCK_MASK_SCOPE; in landlock_create_ruleset() 298 const access_mask_t access, const u32 flags) in landlock_insert_rule()
|
| H A D | audit.c | 113 const access_mask_t access) in log_domain() 175 const access_mask_t missing, const bool logged) in test_get_hierarchy()
|
| H A D | fs.c | 331 access_mask_t access_rights, const u32 flags) in landlock_append_fs_rule() 417 const access_mask_t access_request, in unmask_layers_fs() 458 access_mask_t child_access = src_parent->layers[i].access & in may_refer() 460 access_mask_t parent_access = new_parent->layers[i].access; in may_refer() 625 static bool scope_to_request(const access_mask_t access_request, in scope_to_request() 651 KUNIT_EXPECT_EQ(test, 0, (access_mask_t)masks.layers[0].access); in test_scope_to_request_with_exec_none() 670 (access_mask_t)masks.layers[0].access); in test_scope_to_request_with_exec_some() 671 KUNIT_EXPECT_EQ(test, 0, (access_mask_t)masks.layers[1].access); in test_scope_to_request_with_exec_some() 684 KUNIT_EXPECT_EQ(test, 0, (access_mask_t)masks.layers[0].access); in test_scope_to_request_without_access() 685 KUNIT_EXPECT_EQ(test, 0, (access_mask_t)masks.layers[1].access); in test_scope_to_request_without_access() [all …]
|
| H A D | log.h | 31 access_mask_t access; 72 access_mask_t access; 78 const access_mask_t all_existing_optional_access;
|
| H A D | net.c | 26 const u16 port, access_mask_t access_rights, in landlock_append_net_rule() 60 access_mask_t access_request) in unmask_layers_net() 76 access_mask_t access_request, in current_check_access_socket() 350 access_mask_t access_request; in hook_socket_bind() 367 access_mask_t access_request; in hook_socket_connect() 397 access_mask_t access_request; in hook_socket_sendmsg()
|
| H A D | net.h | 19 const u16 port, access_mask_t access_rights, 28 access_mask_t access_rights, const u32 flags) in landlock_append_net_rule()
|
| H A D | fs.h | 61 access_mask_t allowed_access; 157 access_mask_t access_hierarchy, const u32 flags);
|
| H A D | syscalls.c | 363 access_mask_t mask; in add_rule_net_port() 405 access_mask_t mask;
|
| H A D | task.c | 201 access_mask_t scope) in domain_is_scoped()
|
| H A D | trace.c | 81 const access_mask_t missing, const bool same_exec, const bool logged) in landlock_trace_denial()
|
| /linux/include/trace/events/ |
| H A D | landlock.h | 34 static_assert(sizeof(access_mask_t) <= sizeof(u64)); 130 __trace_landlock_fill_layers(access_mask_t *const layers, in __trace_landlock_fill_layers() 133 const access_mask_t access_request) in __trace_landlock_fill_layers() 138 access_mask_t grants = 0; in __trace_landlock_fill_layers() 161 struct trace_seq *p, const access_mask_t *const layers, in __trace_landlock_print_layers() 169 access_mask_t mask = layers[i]; in __trace_landlock_print_layers() 324 sizeof(access_mask_t), \ 348 __field( access_mask_t, handled_fs ) 349 __field( access_mask_t, handled_net ) 350 __field( access_mask_t, scoped ) [all …]
|