Searched refs:unconfined (Results 1 - 9 of 9) sorted by relevance

/security/apparmor/
H A Dipc.c71 if (unconfined(tracer) || tracer == tracee)
90 * - tracer is unconfined ||
100 if (!unconfined(tracer_p)) {
H A Dprocattr.c56 /* unconfined profiles don't have a mode string appended */
57 if (!unconfined(profile))
71 if (unconfined(profile))
H A Ddomain.c73 if (!tracer || unconfined(tracerp))
104 if (unconfined(profile)) {
166 * find_attach - do attachment search for unconfined processes
372 if (unconfined(profile) ||
382 if (unconfined(profile)) {
383 /* unconfined task */
392 * NOTE: Domain transitions from unconfined are allowed
435 new_profile = aa_get_newest_profile(ns->unconfined);
487 * 1. unconfined switching to confined
489 * 3. confined switching to unconfined
[all...]
H A Dpolicy.c17 * to it determined either by matching "unconfined" tasks against the
21 * visible profiles. Each namespace contains a special "unconfined" profile,
32 * unconfined - special automatically generated unconfined profile
99 "unconfined",
290 ns->unconfined = aa_alloc_profile("unconfined");
291 if (!ns->unconfined)
294 ns->unconfined->flags = PFLAG_IX_ON_NAME_ERROR |
296 ns->unconfined
[all...]
H A Dlsm.c130 if (!unconfined(profile) && !COMPLAIN_MODE(profile)) {
147 if (!unconfined(profile))
169 if (!unconfined(profile))
312 if (!unconfined(profile))
327 if (!unconfined(profile)) {
396 if (!unconfined(profile)) {
440 /* revalidate access, if task is unconfined, or the cached cred
444 * Note: the test for !unconfined(fprofile) is to handle file
445 * delegation from unconfined tasks
447 if (!unconfined(profil
[all...]
H A Daudit.c196 if (!unconfined(profile))
H A Dcontext.c108 if (unconfined(profile) || (cxt->profile->ns != profile->ns))
109 /* if switching to unconfined or a different profile namespace
/security/apparmor/include/
H A Dpolicy.h59 APPARMOR_UNCONFINED, /* profile set to unconfined */
110 * @unconfined: special unconfined profile for the namespace
135 struct aa_profile *unconfined; member in struct:aa_namespace
169 * @xmatch: optional extended matching for unconfined executables names
186 * used to determine profile attachment against unconfined tasks. All other
196 * determining profile attachment on "unconfined" tasks.
257 #define unconfined(X) ((X)->mode == APPARMOR_UNCONFINED) macro
381 aa_get_profile(ns->unconfined);
395 aa_put_profile(ns->unconfined);
[all...]
H A Dcontext.h125 return !unconfined(__aa_task_profile(task));
131 * Returns: up to date confining profile or the ns unconfined profile (NOT NULL)
144 * Returns: up to date confining profile or the ns unconfined profile (NOT NULL)

Completed in 59 milliseconds