security/landlock/ruleset.c

27 static struct landlock_ruleset *create_ruleset(const u32 num_layers)
32 		kzalloc(struct_size(new_ruleset, access_masks, num_layers),
44 	new_ruleset->num_layers = num_layers;
75 		.num_layers = ~0,
78 	BUILD_BUG_ON(rule.num_layers < LANDLOCK_MAX_NUM_LAYERS);
100 	    const struct landlock_layer (*const layers)[], const u32 num_layers,
109 		if (WARN_ON_ONCE(num_layers >= LANDLOCK_MAX_NUM_LAYERS))
111 		new_num_layers = num_layers + 1;
113 		new_num_layers = num_layers;
127 	new_rule->num_layers = new_num_layers;
130 	       flex_array_size(new_rule, layers, num_layers));
133 		new_rule->layers[new_rule->num_layers - 1] = *new_layer;
170 		.num_layers = ~0,
175 	BUILD_BUG_ON(ruleset.num_layers < LANDLOCK_MAX_NUM_LAYERS);
188  * @num_layers: The number of @layers entries.
202 		       const size_t num_layers)
236 		if (WARN_ON_ONCE(num_layers != 1))
245 			if (WARN_ON_ONCE(this->num_layers != 1))
260 		new_rule = create_rule(id, &this->layers, this->num_layers,
273 	new_rule = create_rule(id, layers, num_layers, NULL);
344 			.level = dst->num_layers,
351 		if (WARN_ON_ONCE(walker_rule->num_layers != 1))
384 	if (WARN_ON_ONCE(src->num_layers != 1 || dst->num_layers < 1)) {
388 	dst->access_masks[dst->num_layers - 1] = src->access_masks[0];
433 				  walker_rule->num_layers);
465 	if (WARN_ON_ONCE(child->num_layers <= parent->num_layers)) {
471 	       flex_array_size(parent, access_masks, parent->num_layers));
542 	u32 num_layers;
550 		if (parent->num_layers >= LANDLOCK_MAX_NUM_LAYERS)
552 		num_layers = parent->num_layers + 1;
554 		num_layers = 1;
558 	new_dom = create_ruleset(num_layers);
645 	for (layer_level = 0; layer_level < rule->num_layers; layer_level++) {
724 	for (layer_level = 0; layer_level < domain->num_layers; layer_level++) {