| /linux/security/loadpin/ |
| H A D | loadpin.c | 47 static int enforce = IS_ENABLED(CONFIG_SECURITY_LOADPIN_ENFORCE); variable
71 .data = &enforce,
118 if (enforce) { in loadpin_sb_free_security()
142 if (!enforce) { in loadpin_check()
174 if (unlikely(!enforce)) { in loadpin_check()
257 enforce ? "" : "not "); in loadpin_init()
439 module_param(enforce, int, 0);
440 MODULE_PARM_DESC(enforce, "Enforce module/firmware pinning");
|
| /linux/security/ipe/ |
| H A D | eval.c | 23 bool enforce = true; variable
378 if (!READ_ONCE(enforce)) in ipe_evaluate_event()
392 module_param(enforce, bool, 0400);
393 MODULE_PARM_DESC(enforce, "Start IPE in enforce or permissive mode");
|
| H A D | fs.c | 86 old_value = READ_ONCE(enforce); in setenforce()
93 WRITE_ONCE(enforce, new_value); in setenforce()
113 result = ((READ_ONCE(enforce)) ? "1" : "0"); in getenforce()
|
| H A D | eval.h | 19 extern bool enforce;
|
| H A D | audit.c | 146 op, audit_hook_names[ctx->hook], READ_ONCE(enforce), in ipe_audit_match()
260 * @new_enforce: The new value enforce to be set.
261 * @old_enforce: The old value currently in enforce.
|
| /linux/Documentation/admin-guide/LSM/ |
| H A D | LoadPin.rst | 9 and/or unchangeable filesystem to enforce module and firmware loading
14 "``loadpin.enforce``". By default, it is enabled, but can be disabled at
15 boot ("``loadpin.enforce=0``").
|
| H A D | ipe.rst | 39 checks, allowing IPE to enforce policies that trust files protected by
45 For the IPE policy, specifically, it grants the ability to enforce
235 are signed through the PKCS#7 message format to enforce some level of
299 only enforce the policy marked active. Note that only one policy can be active
334 The default mode is enforce, and can be changed via the kernel command
335 line parameter ``ipe.enforce=(0|1)``, or the securityfs node
336 ``/sys/kernel/security/ipe/enforce``.
|
| /linux/include/linux/ |
| H A D | page-flags.h | 385 #define PF_ANY(page, enforce) PF_POISONED_CHECK(page) argument
386 #define PF_HEAD(page, enforce) PF_POISONED_CHECK(compound_head(page)) argument
387 #define PF_NO_TAIL(page, enforce) ({ \ argument
388 VM_BUG_ON_PGFLAGS(enforce && PageTail(page), page); \
390 #define PF_NO_COMPOUND(page, enforce) ({ \ argument
391 VM_BUG_ON_PGFLAGS(enforce && PageCompound(page), page); \
393 #define PF_SECOND(page, enforce) ({ \ argument
|
| /linux/Documentation/userspace-api/ |
| H A D | check_exec.rst | 10 are intended for script interpreters and dynamic linkers to enforce a
31 set to 1 (i.e. always enforce restrictions).
75 Programs should only enforce consistent restrictions according to the
|
| /linux/Documentation/admin-guide/device-mapper/ |
| H A D | dm-ebs.rst | 48 offset 128 sectors, enforce 2KiB underlying device block size.
|
| /linux/Documentation/hwmon/ |
| H A D | occ.rst | 121 Maximum power cap that the OCC can enforce in
123 power[1-n]_cap_min Minimum power cap that the OCC can enforce in
|
| H A D | f71805f.rst | 160 enforce this limit though.
|
| /linux/Documentation/scsi/ |
| H A D | scsi.rst | 24 will enforce the correct ordering of loading and unloading modules in
|
| /linux/security/selinux/ |
| H A D | Kconfig | 38 /sys/fs/selinux/enforce.
|
| /linux/Documentation/mm/ |
| H A D | ksm.rst | 35 Every "chain" and all "dups" linked into a "chain" enforce the
|
| /linux/Documentation/arch/arm64/ |
| H A D | cpu-hotplug.rst | 59 brought online. Firmware can enforce its policy via PSCI's return codes. e.g.
|
| /linux/security/integrity/ |
| H A D | Kconfig | 83 The .machine keyring can be configured to enforce CA restriction
|
| /linux/Documentation/admin-guide/cgroup-v1/ |
| H A D | devices.rst | 8 Implement a cgroup to track and enforce open and mknod restrictions
|
| /linux/Documentation/process/ |
| H A D | kernel-enforcement-statement.rst | 11 Although there is a right to enforce the separate copyright interests in the
|
| /linux/Documentation/arch/riscv/ |
| H A D | cmodx.rst | 10 program must enforce its own synchronization with the unprivileged fence.i
|
| /linux/Documentation/bpf/ |
| H A D | graph_ds_impl.rst | 77 the same map_value and will enforce that the correct lock is held when
116 obvious. The verifier could enforce the same semantics as for ``bpf_obj_drop``,
|
| /linux/Documentation/arch/x86/ |
| H A D | xstate.rst | 27 enabling, the kernel can enforce userspace applications to have
|
| /linux/arch/arm64/boot/dts/rockchip/ |
| H A D | rk3588-jaguar-pre-ict-tester.dtso | 83 * issue. Therefore, let's enforce a pull-up (which is
|
| /linux/Documentation/arch/powerpc/ |
| H A D | dexcr.rst | 25 enforce aspects for the kernel and userspace.
|
| /linux/Documentation/edac/ |
| H A D | memory_repair.rst | 106 5. Drivers should enforce that live repair is safe. In systems where memory
|