Lines Matching defs:perms
90 * @request: requested perms
100 struct file_perms perms;
105 perms.allow = AA_MAY_CHANGE_PROFILE | AA_MAY_ONEXEC;
106 perms.audit = perms.quiet = perms.kill = 0;
107 return perms;
112 aa_str_perms(profile->file.dfa, start, name, &cond, &perms);
113 if (COMBINED_PERM_MASK(perms) & request)
114 return perms;
120 aa_str_perms(profile->file.dfa, state, name, &cond, &perms);
122 return perms;
344 struct file_perms perms = {};
400 state = aa_str_perms(profile->file.dfa, state, name, &cond, &perms);
404 if (!(perms.allow & AA_MAY_ONEXEC))
422 if (perms.allow & MAY_EXEC) {
424 new_profile = x_to_profile(profile, name, perms.xindex);
426 if (perms.xindex & AA_X_INHERIT) {
434 } else if (perms.xindex & AA_X_UNCONFINED) {
441 perms.allow &= ~MAY_EXEC;
454 perms.xindex |= AA_X_UNSAFE;
497 if (!(perms.xindex & AA_X_UNSAFE)) {
516 error = aa_audit_file(profile, &perms, GFP_KERNEL, OP_EXEC, MAY_EXEC,
615 struct file_perms perms = {};
702 perms.kill = AA_MAY_CHANGEHAT;
713 perms.kill = AA_MAY_CHANGEHAT;
720 error = aa_audit_file(profile, &perms, GFP_KERNEL,
753 struct file_perms perms = {};
806 perms = change_profile_perms(profile, ns, hname, request,
808 if (!(perms.allow & request)) {
846 error = aa_audit_file(profile, &perms, GFP_KERNEL, op, request,