Home
last modified time | relevance | path

Searched refs:denied (Results 1 – 25 of 48) sorted by relevance

12

/linux/security/selinux/include/
H A Davc.h54 u32 denied; member
67 u32 denied, audited; in avc_audit_required() local
72 denied = requested & ~avd->allowed; in avc_audit_required()
73 if (unlikely(denied)) { in avc_audit_required()
74 audited = denied & avd->auditdeny; in avc_audit_required()
94 audited = denied = requested; in avc_audit_required()
97 *deniedp = denied; in avc_audit_required()
102 u32 denied, int result, struct common_audit_data *a);
127 u32 audited, denied; in avc_audit() local
128 audited = avc_audit_required(requested, avd, result, 0, &denied); in avc_audit()
[all …]
/linux/include/trace/events/
H A Davc.h26 __field(u32, denied)
36 __entry->denied = sad->denied;
44 TP_printk("requested=0x%x denied=0x%x audited=0x%x result=%d scontext=%s tcontext=%s tclass=%s",
45 __entry->requested, __entry->denied, __entry->audited, __entry->result,
/linux/security/apparmor/
H A Dlib.c430 u32 denied = request & (~perms->allow | perms->deny); in aa_check_perms() local
432 if (likely(!denied)) { in aa_check_perms()
442 if (denied == (denied & perms->hide)) in aa_check_perms()
445 denied &= ~perms->quiet; in aa_check_perms()
446 if (!ad || !denied) in aa_check_perms()
450 int type = aa_select_audit_type(denied, perms); in aa_check_perms()
455 ad->denied = denied; in aa_check_perms()
H A Dfile.c57 if (ad->denied & AA_AUDIT_FILE_MASK) { in file_audit_cb()
59 map_mask_to_chr_mask(ad->denied)); in file_audit_cb()
152 ad.denied = ad.request & ~perms->allow; in aa_audit_file()
493 u32 request, u32 denied, bool in_atomic) in __file_path_perm() argument
507 if (!denied && aa_label_is_subset(flabel, label)) in __file_path_perm()
521 if (denied && !error) { in __file_path_perm()
554 u32 request, u32 denied) in __file_sock_perm() argument
559 if (!denied && aa_label_is_subset(flabel, label)) in __file_sock_perm()
564 if (denied) { in __file_sock_perm()
632 u32 denied; in aa_file_perm() local
[all …]
H A Daudit.c143 int aa_select_audit_type(u32 denied, const struct aa_perms *perms) in aa_select_audit_type() argument
145 if (likely(!denied)) in aa_select_audit_type()
147 else if (denied & perms->kill) in aa_select_audit_type()
149 else if (denied == (denied & perms->complain)) in aa_select_audit_type()
178 ad->denied = request; in aa_audit_perm_error()
H A Dipc.c60 if (ad->denied & AA_SIGNAL_PERM_MASK) { in audit_signal_cb()
62 audit_signal_mask(ad->denied)); in audit_signal_cb()
H A Dtask.c242 if (ad->denied & AA_PTRACE_PERM_MASK) { in audit_ptrace_cb()
244 audit_ptrace_mask(ad->denied)); in audit_ptrace_cb()
362 if (ad->denied & AA_USERNS_CREATE) in audit_ns_cb()
H A Dnet.c141 if (ad->denied & NET_PERMS_MASK) { in audit_net_cb()
143 aa_audit_perm_mask(ab, ad->denied, NULL, 0, in audit_net_cb()
H A Dcapability.c151 !cap_raised(rules->caps.denied, cap)) in profile_capable()
/linux/security/selinux/
H A Davc.c390 u32 denied, audited; in avc_xperms_audit_required() local
392 denied = requested & ~avd->allowed; in avc_xperms_audit_required()
393 if (unlikely(denied)) { in avc_xperms_audit_required()
394 audited = denied & avd->auditdeny; in avc_xperms_audit_required()
400 audited = denied = requested; in avc_xperms_audit_required()
409 *deniedp = denied; in avc_xperms_audit_required()
419 u32 audited, denied; in avc_xperms_audit() local
422 requested, avd, xpd, perm, result, &denied); in avc_xperms_audit()
426 audited, denied, result, ad); in avc_xperms_audit()
658 audit_log_format(ab, "avc: %s ", sad->denied in avc_audit_pre_callback()
754 slow_avc_audit(u32 ssid,u32 tsid,u16 tclass,u32 requested,u32 audited,u32 denied,int result,struct common_audit_data * a) slow_avc_audit() argument
1024 u32 denied; avc_has_extended_perms() local
1113 u32 denied; avc_perm_nonode() local
1149 u32 denied; avc_has_perm_noaudit() local
[all...]
/linux/Documentation/ABI/stable/
H A Dsysfs-hypervisor-xen7 Might return "<denied>" in case of special security settings
16 Might return "<denied>" in case of special security settings
25 Might return "<denied>" in case of special security settings
56 Might return "<denied>" in case of special security settings
105 Might return "<denied>" in case of special security settings
/linux/Documentation/admin-guide/cgroup-v1/
H A Ddevices.rst19 never receive a device access which is denied by its parent.
77 If a device is denied in group A::
84 group whitelist entries denied devices
97 group whitelist entries denied devices
107 group whitelist entries denied devices
/linux/Documentation/trace/
H A Devents-landlock.rst39 **Denial events** are emitted when an access is denied:
41 - ``landlock_deny_access_fs``: filesystem access denied
42 - ``landlock_deny_access_net``: network access denied
43 - ``landlock_deny_ptrace``: ptrace access denied
44 - ``landlock_deny_scope_signal``: signal delivery denied
46 access denied
78 it is denied reading ``/etc/passwd``, which lies outside its read-only
194 access is allowed or denied.
231 through another matching rule, or the right is denied and appears in the
244 denied one.
/linux/security/apparmor/include/
H A Daudit.h122 u32 denied; member
187 int aa_select_audit_type(u32 denied, const struct aa_perms *perms);
H A Dcapability.h32 kernel_cap_t denied; member
/linux/security/landlock/
H A Ddomain.c710 const access_mask_t denied = masks->layers[i].access & in landlock_get_deny_masks() local
712 const unsigned long newly_denied = denied & ~all_denied; in landlock_get_deny_masks()
722 all_denied |= denied; in landlock_get_deny_masks()
/linux/Documentation/ABI/testing/
H A Dsysfs-class-power-wilco26 be denied by Wilco EC when Long Life mode is enabled.
H A Dsysfs-hypervisor-xen45 Might return "<denied>" in case of special security settings
H A Dsysfs-block-device35 access is denied with -EOPNOTSUPP.
/linux/Documentation/userspace-api/gpio/
H A Derror-codes.rst55 - Permission denied. Typically returned in response to an attempt
/linux/Documentation/admin-guide/
H A Dmono.rst69 If this fails with a permission denied error, check
/linux/Documentation/userspace-api/media/
H A Dgen-errors.rst72 - Permission denied. Can be returned if the device needs write
/linux/tools/perf/Documentation/
H A Dsecurity.txt156 output would contain AVC denied records related to perf_event:
163 …audit[1318098]: AVC avc: denied { open } for pid=1318098 comm="perf" scontext=unconfined_u:unco…
/linux/Documentation/userspace-api/ioctl/
H A Dhdio.rst441 - EACCES Access denied: requires CAP_SYS_RAWIO
510 - EACCES Access denied: requires CAP_SYS_RAWIO
545 - EACCES Access denied: requires CAP_SYS_ADMIN
/linux/Documentation/security/
H A DSCTP.rst217 to determine whether the association should be allowed or denied.
310 the association should be allowed or denied.

12