Lines Matching full:profile
81 * @profile: the profile being enforced (NOT NULL)
95 struct aa_profile *profile, struct aa_perms *perms, in aa_audit_file() argument
116 if (unlikely(AUDIT_MODE(profile) == AUDIT_ALL)) in aa_audit_file()
135 AUDIT_MODE(profile) != AUDIT_NOQUIET && in aa_audit_file()
136 AUDIT_MODE(profile) != AUDIT_ALL) in aa_audit_file()
144 return aa_audit(type, profile, &ad, file_audit_cb); in aa_audit_file()
165 struct aa_profile *profile; in path_name() local
172 fn_for_each_confined(label, profile, in path_name()
174 profile, &nullperms, op, request, *name, in path_name()
229 struct aa_profile *profile, const char *name, in __aa_path_perm() argument
233 struct aa_ruleset *rules = list_first_entry(&profile->rules, in __aa_path_perm()
237 if (profile_unconfined(profile)) in __aa_path_perm()
244 profile, perms, op, request, name, NULL, NULL, in __aa_path_perm()
250 struct aa_profile *profile, in profile_path_perm() argument
258 if (profile_unconfined(profile)) in profile_path_perm()
261 error = path_name(op, subj_cred, &profile->label, path, in profile_path_perm()
262 flags | profile->path_flags, buffer, &name, cond, in profile_path_perm()
266 return __aa_path_perm(op, subj_cred, profile, name, request, cond, in profile_path_perm()
274 * @label: profile being enforced (NOT NULL)
276 * @flags: any additional path flags beyond what the profile specifies
288 struct aa_profile *profile; in aa_path_perm() local
297 error = fn_for_each_confined(label, profile, in aa_path_perm()
298 profile_path_perm(op, subj_cred, profile, path, buffer, in aa_path_perm()
327 struct aa_profile *profile, in profile_path_link() argument
332 struct aa_ruleset *rules = list_first_entry(&profile->rules, in profile_path_link()
341 error = path_name(OP_LINK, subj_cred, &profile->label, link, in profile_path_link()
342 profile->path_flags, in profile_path_link()
348 error = path_name(OP_LINK, subj_cred, &profile->label, target, in profile_path_link()
349 profile->path_flags, in profile_path_link()
410 profile, &lperms, OP_LINK, request, lname, tname, in profile_path_link()
444 struct aa_profile *profile; in aa_path_link() local
454 error = fn_for_each_confined(label, profile, in aa_path_link()
455 profile_path_link(subj_cred, profile, &link, buffer, in aa_path_link()
489 struct aa_profile *profile; in __file_path_perm() local
510 /* check every profile in task label not in current cache */ in __file_path_perm()
511 error = fn_for_each_not_in_set(flabel, label, profile, in __file_path_perm()
512 profile_path_perm(op, subj_cred, profile, in __file_path_perm()
517 * check every profile in file label that was not tested in __file_path_perm()
525 error = fn_for_each(label, profile, in __file_path_perm()
527 profile, &file->f_path, in __file_path_perm()
531 error = fn_for_each_not_in_set(label, flabel, profile, in __file_path_perm()
533 profile, &file->f_path, in __file_path_perm()
563 /* check every profile in file label to is cached */ in __file_sock_perm()