security/apparmor/domain.c

631 static struct aa_label *profile_transition(const struct cred *subj_cred,
722 	aa_audit_file(subj_cred, profile, &perms, OP_EXEC, MAY_EXEC, name,
733 static int profile_onexec(const struct cred *subj_cred,
802 	return aa_audit_file(subj_cred, profile, &perms, OP_EXEC,
809 static struct aa_label *handle_onexec(const struct cred *subj_cred,
827 				profile_onexec(subj_cred, profile, onexec, stack,
833 				profile_transition(subj_cred, profile, bprm,
840 				profile_onexec(subj_cred, profile, onexec, stack, bprm,
847 				profile_transition(subj_cred, profile, bprm,
857 			aa_audit_file(subj_cred, profile, &nullperms,
877 	const struct cred *subj_cred;
890 	subj_cred = current_cred();
917 		new = handle_onexec(subj_cred, label, ctx->onexec, ctx->token,
921 				profile_transition(subj_cred, profile, bprm,
1011 static struct aa_label *build_change_hat(const struct cred *subj_cred,
1044 	aa_audit_file(subj_cred, profile, &nullperms, OP_CHANGE_HAT,
1061 static struct aa_label *change_hat(const struct cred *subj_cred,
1138 			aa_audit_file(subj_cred, profile, &nullperms,
1148 				   build_change_hat(subj_cred, profile, name,
1179 	const struct cred *subj_cred;
1188 	subj_cred = get_current_cred();
1189 	label = aa_get_newest_cred_label(subj_cred);
1209 		new = change_hat(subj_cred, label, hats, count, flags);
1219 		error = may_change_ptraced_domain(subj_cred, new, &info);
1272 	put_cred(subj_cred);
1282 		aa_audit_file(subj_cred, profile, &perms, OP_CHANGE_HAT,
1291 					const struct cred *subj_cred,
1306 		error = aa_audit_file(subj_cred, profile, perms, op, request,
1338 	const struct cred *subj_cred = get_current_cred();
1391 				aa_audit_file(subj_cred, profile, &perms, op,
1438 						     subj_cred,
1449 	error = may_change_ptraced_domain(subj_cred, target, &info);
1509 			aa_audit_file(subj_cred,
1518 	put_cred(subj_cred);