Home
last modified time | relevance | path

Searched refs:allowed_access (Results 1 – 8 of 8) sorted by relevance

/linux/security/landlock/
H A Dsyscalls.c117 path_beneath_size = sizeof(path_beneath_attr.allowed_access); in build_check_abi()
122 net_port_size = sizeof(net_port_attr.allowed_access); in fop_ruleset_release()
372 * Informs about useless rule: empty allowed_access (i.e. deny rules) in add_rule_net_port()
376 if (!flags && !path_beneath_attr.allowed_access) in add_rule_net_port()
379 /* Checks that allowed_access matches the @ruleset constraints. */ in add_rule_net_port()
381 if ((path_beneath_attr.allowed_access | mask) != mask) in add_rule_net_port()
395 path_beneath_attr.allowed_access, flags);
413 * Informs about useless rule: empty allowed_access (i.e. deny rules)
417 if (!flags && !net_port_attr.allowed_access)
420 /* Checks that allowed_access matche in SYSCALL_DEFINE4()
[all...]
H A Dfs.c1845 landlock_file(file)->allowed_access = LANDLOCK_MASK_ACCESS_FS; in hook_file_alloc_security()
1859 access_mask_t open_access_request, full_access_request, allowed_access, in hook_file_open() local
1891 allowed_access = full_access_request; in hook_file_open()
1898 allowed_access = full_access_request; in hook_file_open()
1900 allowed_access &= ~layer_masks.layers[i].access; in hook_file_open()
1909 landlock_file(file)->allowed_access = allowed_access; in hook_file_open()
1919 if (access_mask_subset(open_access_request, allowed_access)) in hook_file_open()
1940 if (landlock_file(file)->allowed_access & LANDLOCK_ACCESS_FS_TRUNCATE) in hook_file_truncate()
1962 access_mask_t allowed_access = landlock_file(file)->allowed_access; in hook_file_ioctl_common() local
1970 if (allowed_access & LANDLOCK_ACCESS_FS_IOCTL_DEV) in hook_file_ioctl_common()
H A Dfs.h56 * @allowed_access: Access rights that were available at the time of
61 access_mask_t allowed_access;
55 access_mask_t allowed_access; global() member
/linux/tools/testing/selftests/landlock/
H A Dnet_test.c933 .allowed_access = bind_access | conn_access, in TEST_F()
937 .allowed_access = conn_access, in TEST_F()
962 .allowed_access = bind_access, in TEST_F()
1004 .allowed_access = bind_access | conn_access, in TEST_F()
1008 .allowed_access = bind_access, in TEST_F()
1033 .allowed_access = bind_access, in TEST_F()
1064 .allowed_access = bind_access, in TEST_F()
1167 .allowed_access = connect_right, in TEST_F()
1548 .allowed_access = in TEST_F()
1599 .allowed_access in TEST_F()
[all...]
H A Dtrace_fs_test.c198 .allowed_access = LANDLOCK_ACCESS_FS_READ_FILE, in TEST_F()
257 .allowed_access = LANDLOCK_ACCESS_FS_READ_FILE, in TEST_F()
350 TEST_F(trace_fs, allowed_access) in TEST_F() argument
428 .allowed_access = LANDLOCK_ACCESS_FS_READ_DIR, in TEST_F()
589 .allowed_access = 0, in TEST_F()
H A Dbase_test.c195 .allowed_access = LANDLOCK_ACCESS_FS_EXECUTE, in TEST()
242 .allowed_access = LANDLOCK_ACCESS_FS_EXECUTE, in TEST()
298 .allowed_access = LANDLOCK_ACCESS_FS_EXECUTE, in TEST()
484 .allowed_access = LANDLOCK_ACCESS_FS_READ_DIR,
630 .allowed_access = LANDLOCK_ACCESS_FS_READ_DIR,
663 .allowed_access = LANDLOCK_ACCESS_NET_BIND_TCP,
H A Dfs_test.c482 .allowed_access = LANDLOCK_ACCESS_FS_READ_FILE | in TEST_F_FORK()
533 /* Checks unhandled allowed_access. */ in TEST_F_FORK()
539 path_beneath.allowed_access |= LANDLOCK_ACCESS_FS_EXECUTE; in TEST_F_FORK()
543 path_beneath.allowed_access &= ~LANDLOCK_ACCESS_FS_EXECUTE; in TEST_F_FORK()
546 path_beneath.allowed_access |= LANDLOCK_ACCESS_FS_REFER; in TEST_F_FORK()
550 path_beneath.allowed_access &= ~LANDLOCK_ACCESS_FS_REFER; in TEST_F_FORK()
553 path_beneath.allowed_access |= (1ULL << 60); in TEST_F_FORK()
557 path_beneath.allowed_access &= ~(1ULL << 60); in TEST_F_FORK()
560 path_beneath.allowed_access = 0; in TEST_F_FORK()
564 path_beneath.allowed_access in TEST_F_FORK()
720 add_path_beneath(struct __test_metadata * const _metadata,const int ruleset_fd,const __u64 allowed_access,const char * const path) add_path_beneath() argument
[all...]
/linux/samples/landlock/
H A Dsandboxer.c125 const __u64 allowed_access, __u32 flags) in populate_ruleset_fs()
171 path_beneath.allowed_access = allowed_access; in populate_ruleset_fs()
173 path_beneath.allowed_access &= ACCESS_FILE; in populate_ruleset_fs()
193 const __u64 allowed_access, __u32 flags) in populate_ruleset_net()
198 .allowed_access = allowed_access, in populate_ruleset_net()
120 populate_ruleset_fs(const char * const env_var,const int ruleset_fd,const __u64 allowed_access) populate_ruleset_fs() argument
188 populate_ruleset_net(const char * const env_var,const int ruleset_fd,const __u64 allowed_access) populate_ruleset_net() argument