Lines Matching full:cap
49 audit_log_untrustedstring(ab, capability_names[sa->u.cap]); in audit_cb()
56 * @cap: capability tested
65 int cap, int error) in audit_caps() argument
77 !cap_raised(rules->caps.audit, cap))) in audit_caps()
81 cap_raised(rules->caps.kill, cap)) { in audit_caps()
83 } else if (cap_raised(rules->caps.quiet, cap) && in audit_caps()
92 if (profile == ent->profile && cap_raised(ent->caps, cap)) { in audit_caps()
102 cap_raise(ent->caps, cap); in audit_caps()
110 * profile_capable - test if profile allows use of capability @cap
112 * @cap: capability to test if allowed
118 static int profile_capable(struct aa_profile *profile, int cap, in profile_capable() argument
125 if (cap_raised(rules->caps.allow, cap) && in profile_capable()
126 !cap_raised(rules->caps.denied, cap)) in profile_capable()
134 /* audit the cap request in complain mode but note that it in profile_capable()
140 return audit_caps(ad, profile, cap, error); in profile_capable()
147 * @cap: capability to be tested
155 int cap, unsigned int opts) in aa_capable() argument
162 ad.common.u.cap = cap; in aa_capable()
164 profile_capable(profile, cap, opts, &ad)); in aa_capable()