Home
last modified time | relevance | path

Searched refs:ns_capable (Results 1 – 25 of 64) sorted by relevance

123

/linux/include/linux/
H A Dcapability.h149 extern bool ns_capable(struct user_namespace *ns, int cap);
175 static inline bool ns_capable(struct user_namespace *ns, int cap) in ns_capable() function
207 return ns_capable(ns, CAP_CHECKPOINT_RESTORE) || in checkpoint_restore_ns_capable()
208 ns_capable(ns, CAP_SYS_ADMIN); in checkpoint_restore_ns_capable()
/linux/kernel/cgroup/
H A Dnamespace.c64 if (!ns_capable(user_ns, CAP_SYS_ADMIN)) in copy_cgroup_ns()
97 if (!ns_capable(nsset->cred->user_ns, CAP_SYS_ADMIN) || in cgroupns_install()
98 !ns_capable(cgroup_ns->user_ns, CAP_SYS_ADMIN)) in cgroupns_install()
/linux/kernel/
H A Dcapability.c360 bool ns_capable(struct user_namespace *ns, int cap) in ns_capable() function
364 EXPORT_SYMBOL(ns_capable);
415 return ns_capable(&init_user_ns, cap); in capable()
495 return ns_capable(ns, cap) && in capable_wrt_inode_uidgid()
H A Dutsname.c132 if (!ns_capable(ns->user_ns, CAP_SYS_ADMIN) || in utsns_install()
133 !ns_capable(nsset->cred->user_ns, CAP_SYS_ADMIN)) in utsns_install()
H A Duser_namespace.c1207 if (ns_capable(ns->parent, cap_setid) && in new_idmap_permitted()
1361 if (!ns_capable(user_ns, CAP_SYS_ADMIN)) in userns_install()
/linux/net/8021q/
H A Dvlan.c542 if (!ns_capable(net->user_ns, CAP_NET_ADMIN)) in vlan_ioctl_handler()
552 if (!ns_capable(net->user_ns, CAP_NET_ADMIN)) in vlan_ioctl_handler()
561 if (!ns_capable(net->user_ns, CAP_NET_ADMIN)) in vlan_ioctl_handler()
570 if (!ns_capable(net->user_ns, CAP_NET_ADMIN)) in vlan_ioctl_handler()
585 if (!ns_capable(net->user_ns, CAP_NET_ADMIN)) in vlan_ioctl_handler()
592 if (!ns_capable(net->user_ns, CAP_NET_ADMIN)) in vlan_ioctl_handler()
/linux/kernel/bpf/
H A Dtoken.c14 return ns_capable(ns, cap) || (cap != CAP_SYS_ADMIN && ns_capable(ns, CAP_SYS_ADMIN)); in bpf_ns_capable()
146 if (!ns_capable(userns, CAP_BPF)) in bpf_token_create()
/linux/ipc/
H A Dnamespace.c237 if (!ns_capable(ns->user_ns, CAP_SYS_ADMIN) || in ipcns_install()
238 !ns_capable(nsset->cred->user_ns, CAP_SYS_ADMIN)) in ipcns_install()
H A Dutil.c568 !ns_capable(ns->user_ns, CAP_IPC_OWNER)) in ipcperms()
740 ns_capable(ns->user_ns, CAP_SYS_ADMIN)) in ipcctl_obtain_check()
/linux/security/
H A Dcommoncap.c180 if (ns_capable(child_cred->user_ns, CAP_SYS_PTRACE)) in cap_ptrace_access_check()
590 if (ns_capable(inode->i_sb->s_user_ns, CAP_SETFCAP)) in cap_convert_nscap()
954 if (!ns_capable(new->user_ns, CAP_SETUID) || in cap_bprm_creds_from_file()
1042 if (!ns_capable(user_ns, CAP_SYS_ADMIN)) in cap_inode_setxattr()
1086 if (!ns_capable(user_ns, CAP_SYS_ADMIN)) in cap_inode_removexattr()
1215 if (!is_subset && !ns_capable(__task_cred(p)->user_ns, CAP_SYS_NICE)) in cap_safe_nice()
1274 if (!ns_capable(current_user_ns(), CAP_SETPCAP)) in cap_prctl_drop()
/linux/fs/
H A Dfhandle.c298 return mnt_ns && ns_capable(mnt_ns->user_ns, CAP_SYS_ADMIN); in capable_wrt_mount()
333 if (ns_capable(root->mnt->mnt_sb->s_user_ns, CAP_SYS_ADMIN)) in may_decode_fh()
343 if (!ns_capable(current_user_ns(), CAP_DAC_READ_SEARCH)) in may_decode_fh()
H A Dattr.c104 ns_capable(inode->i_sb->s_user_ns, CAP_CHOWN)) in chown_ok()
135 ns_capable(inode->i_sb->s_user_ns, CAP_CHOWN)) in chgrp_ok()
H A Dioctl.c389 if (!ns_capable(sb->s_user_ns, CAP_SYS_ADMIN)) in ioctl_fsfreeze()
406 if (!ns_capable(sb->s_user_ns, CAP_SYS_ADMIN)) in ioctl_fsthaw()
H A Dfsopen.c262 if (!ns_capable(sb->s_user_ns, CAP_SYS_ADMIN)) { in vfs_cmd_reconfigure()
/linux/net/ipv4/
H A Dip_options.c396 if (!skb && !ns_capable(net->user_ns, CAP_NET_RAW)) { in __ip_options_compile()
431 if ((!skb && !ns_capable(net->user_ns, CAP_NET_RAW)) || opt->cipso) { in __ip_options_compile()
444 if (!skb && !ns_capable(net->user_ns, CAP_NET_RAW)) { in __ip_options_compile()
533 if (opt->opt.srr && !ns_capable(net->user_ns, CAP_NET_RAW)) { in ip_options_get()
/linux/security/yama/
H A Dyama_lsm.c366 !ns_capable(__task_cred(child)->user_ns, CAP_SYS_PTRACE)) in yama_ptrace_access_check()
372 if (!ns_capable(__task_cred(child)->user_ns, CAP_SYS_PTRACE)) in yama_ptrace_access_check()
/linux/net/core/
H A Dscm.c59 ns_capable(task_active_pid_ns(current)->user_ns, CAP_SYS_ADMIN)) && in scm_check_creds()
61 uid_eq(uid, cred->suid)) || ns_capable(cred->user_ns, CAP_SETUID)) && in scm_check_creds()
63 gid_eq(gid, cred->sgid)) || ns_capable(cred->user_ns, CAP_SETGID))) { in scm_check_creds()
H A Dnet-sysfs.c167 if (!ns_capable(net->user_ns, CAP_NET_ADMIN)) in netdev_store()
198 if (!ns_capable(net->user_ns, CAP_NET_ADMIN)) in netdev_lock_store()
568 if (!ns_capable(net->user_ns, CAP_NET_ADMIN)) in ifalias_store()
1858 if (!ns_capable(net->user_ns, CAP_NET_ADMIN)) in xps_rxqs_store()
2164 return ns_capable(net->user_ns, CAP_SYS_ADMIN); in net_current_may_mount()
/linux/security/keys/
H A Dpersistent.c149 !ns_capable(ns, CAP_SETUID)) in keyctl_get_persistent()
/linux/net/ieee802154/
H A Dsocket.c919 if (!ns_capable(net->user_ns, CAP_NET_ADMIN) && in dgram_setsockopt()
920 !ns_capable(net->user_ns, CAP_NET_RAW)) { in dgram_setsockopt()
943 if (!ns_capable(net->user_ns, CAP_NET_ADMIN) && in dgram_setsockopt()
944 !ns_capable(net->user_ns, CAP_NET_RAW)) { in dgram_setsockopt()
/linux/drivers/connector/
H A Dconnector.c176 if (ns_capable(net->user_ns, CAP_NET_ADMIN)) in cn_bind()
/linux/net/ipv6/
H A Ddatagram.c915 if (!ns_capable(net->user_ns, CAP_NET_RAW)) { in ip6_datagram_send_ctl()
935 if (!ns_capable(net->user_ns, CAP_NET_RAW)) { in ip6_datagram_send_ctl()
960 if (!ns_capable(net->user_ns, CAP_NET_RAW)) { in ip6_datagram_send_ctl()
H A Dip6_vti.c831 if (!ns_capable(net->user_ns, CAP_NET_ADMIN)) in vti6_siocdevprivate()
844 if (!ns_capable(self->net->user_ns, CAP_NET_ADMIN)) in vti6_siocdevprivate()
870 if (!ns_capable(net->user_ns, CAP_NET_ADMIN)) in vti6_siocdevprivate()
H A Dsit.c465 if (!ns_capable(t->net->user_ns, CAP_NET_ADMIN)) in ipip6_tunnel_prl_ctl()
1227 if (!ns_capable(t->net->user_ns, CAP_NET_ADMIN)) in ipip6_tunnel_6rdctl()
1256 if (!ns_capable(net->user_ns, CAP_NET_ADMIN)) in __ipip6_tunnel_ioctl_validate()
1335 if (!ns_capable(t->net->user_ns, CAP_NET_ADMIN)) in ipip6_tunnel_del()
/linux/net/nfc/
H A Drawsock.c345 if (!ns_capable(net->user_ns, CAP_NET_RAW)) in rawsock_create()

123