Home
last modified time | relevance | path

Searched refs:file_ns_capable (Results 1 – 11 of 11) sorted by relevance

/linux/security/ipe/
H A Dfs.c35 if (!file_ns_capable(f, &init_user_ns, CAP_MAC_ADMIN)) in setaudit()
83 if (!file_ns_capable(f, &init_user_ns, CAP_MAC_ADMIN)) in setenforce()
143 if (!file_ns_capable(f, &init_user_ns, CAP_MAC_ADMIN)) { in new_policy()
H A Dpolicy_fs.c216 if (!file_ns_capable(f, &init_user_ns, CAP_MAC_ADMIN)) in setactive()
305 if (!file_ns_capable(f, &init_user_ns, CAP_MAC_ADMIN)) { in update_policy()
356 if (!file_ns_capable(f, &init_user_ns, CAP_MAC_ADMIN)) in delete_policy()
/linux/kernel/
H A Dcapability.c450 bool file_ns_capable(const struct file *file, struct user_namespace *ns, in file_ns_capable() function
462 EXPORT_SYMBOL(file_ns_capable);
H A Duser_namespace.c925 if (!file_ns_capable(file, map_ns->parent, CAP_SETFCAP)) in verify_root_map()
986 if (cap_valid(cap_setid) && !file_ns_capable(file, map_ns, CAP_SYS_ADMIN)) in map_write()
1208 file_ns_capable(file, ns->parent, cap_setid)) in new_idmap_permitted()
H A Dseccomp.c2538 if (!file_ns_capable(m->file, &init_user_ns, CAP_SYS_ADMIN)) in proc_pid_seccomp_cache()
/linux/security/safesetid/
H A Dsecurityfs.c243 if (!file_ns_capable(file, &init_user_ns, CAP_MAC_ADMIN)) in safesetid_uid_file_write()
257 if (!file_ns_capable(file, &init_user_ns, CAP_MAC_ADMIN)) in safesetid_gid_file_write()
/linux/include/linux/
H A Dcapability.h193 extern bool file_ns_capable(const struct file *file, struct user_namespace *ns, int cap);
/linux/kernel/cgroup/
H A Dcgroup-v1.c568 !file_ns_capable(of->file, &init_user_ns, CAP_SYS_ADMIN)) in cgroup_release_agent_write()
/linux/net/netlink/
H A Daf_netlink.c852 file_ns_capable(nsp->sk->sk_socket->file, user_ns, cap)) && in __netlink_ns_capable()
1443 if (!file_ns_capable(sk->sk_socket->file, p->net->user_ns, in do_one_broadcast()
/linux/net/core/
H A Dsock.c174 return file_ns_capable(sk->sk_socket->file, user_ns, cap) && in sk_ns_capable()
H A Dskbuff.c5636 ret = file_ns_capable(file, &init_user_ns, CAP_NET_RAW); in skb_complete_tx_timestamp()