security/apparmor/file.c

81  * @profile: the profile being enforced  (NOT NULL)
95 		  struct aa_profile *profile, struct aa_perms *perms,
116 		if (unlikely(AUDIT_MODE(profile) == AUDIT_ALL))
135 		    AUDIT_MODE(profile) != AUDIT_NOQUIET &&
136 		    AUDIT_MODE(profile) != AUDIT_ALL)
144 	return aa_audit(type, profile, &ad, file_audit_cb);
165 	struct aa_profile *profile;
172 		fn_for_each_confined(label, profile,
174 				      profile, &nullperms, op, request, *name,
229 			  struct aa_profile *profile, const char *name,
233 	struct aa_ruleset *rules = list_first_entry(&profile->rules,
237 	if (profile_unconfined(profile))
244 			     profile, perms, op, request, name, NULL, NULL,
250 			     struct aa_profile *profile,
258 	if (profile_unconfined(profile))
261 	error = path_name(op, subj_cred, &profile->label, path,
262 			  flags | profile->path_flags, buffer, &name, cond,
266 	return __aa_path_perm(op, subj_cred, profile, name, request, cond,
274  * @label: profile being enforced  (NOT NULL)
276  * @flags: any additional path flags beyond what the profile specifies
288 	struct aa_profile *profile;
297 	error = fn_for_each_confined(label, profile,
298 			profile_path_perm(op, subj_cred, profile, path, buffer,
327 			     struct aa_profile *profile,
332 	struct aa_ruleset *rules = list_first_entry(&profile->rules,
341 	error = path_name(OP_LINK, subj_cred, &profile->label, link,
342 			  profile->path_flags,
348 	error = path_name(OP_LINK, subj_cred, &profile->label, target,
349 			  profile->path_flags,
410 			     profile, &lperms, OP_LINK, request, lname, tname,
444 	struct aa_profile *profile;
454 	error = fn_for_each_confined(label, profile,
455 			profile_path_link(subj_cred, profile, &link, buffer,
489 	struct aa_profile *profile;
510 	/* check every profile in task label not in current cache */
511 	error = fn_for_each_not_in_set(flabel, label, profile,
512 			profile_path_perm(op, subj_cred, profile,
517 		 * check every profile in file label that was not tested
525 			error = fn_for_each(label, profile,
527 						  profile, &file->f_path,
531 			error = fn_for_each_not_in_set(label, flabel, profile,
533 						  profile, &file->f_path,
563 		/* check every profile in file label to is cached */