security/selinux/avc.c

51 	struct av_decision	avd;
386 					struct av_decision *avd,
394 	denied = requested & ~avd->allowed;
396 		audited = denied & avd->auditdeny;
404 		audited = requested & avd->auditallow;
416 				   u32 requested, struct av_decision *avd,
424 			requested, avd, xpd, perm, result, &denied);
515 static void avc_node_populate(struct avc_node *node, u32 ssid, u32 tsid, u16 tclass, struct av_decision *avd)
520 	memcpy(&node->ae.avd, avd, sizeof(node->ae.avd));
596  * @avd: resulting av decision
604  * sequence number @avd->seqno is not less than the latest
609 		       struct av_decision *avd, struct avc_xperms_node *xp_node)
617 	if (avc_latest_notif_update(avd->seqno, 1))
624 	avc_node_populate(node, ssid, tsid, tclass, avd);
861 		    seqno == pos->ae.avd.seqno){
877 	avc_node_populate(node, ssid, tsid, tclass, &orig->ae.avd);
889 		node->ae.avd.allowed |= perms;
895 		node->ae.avd.allowed &= ~perms;
898 		node->ae.avd.auditallow |= perms;
901 		node->ae.avd.auditallow &= ~perms;
904 		node->ae.avd.auditdeny |= perms;
907 		node->ae.avd.auditdeny &= ~perms;
978  * @avd: access vector decision
986 				    struct av_decision *avd,
990 	security_compute_av(ssid, tsid, tclass, avd, &xp_node->xp);
991 	avc_insert(ssid, tsid, tclass, avd, xp_node);
997 			       struct av_decision *avd)
1003 	    !(avd->flags & AVD_FLAGS_PERMISSIVE))
1007 			xperm, ssid, tsid, tclass, avd->seqno, NULL, flags);
1022 	struct av_decision avd;
1041 		avc_compute_av(ssid, tsid, tclass, &avd, xp_node);
1043 		memcpy(&avd, &node->ae.avd, sizeof(avd));
1061 			avd.allowed &= ~requested;
1069 				driver, xperm, ssid, tsid, tclass, avd.seqno,
1077 		avd.allowed &= ~requested;
1080 	denied = requested & ~(avd.allowed);
1083 				driver, xperm, AVC_EXTENDED_PERMS, &avd);
1088 			&avd, xpd, xperm, rc, ad);
1101  * @avd: access vector decision
1109 				    struct av_decision *avd)
1114 	avc_compute_av(ssid, tsid, tclass, avd, &xp_node);
1115 	denied = requested & ~(avd->allowed);
1118 				  flags, avd);
1129  * @avd: access vector decisions
1135  * in @avd.  Return %0 if all @requested permissions are granted,
1145 				struct av_decision *avd)
1158 				       flags, avd);
1160 	denied = requested & ~node->ae.avd.allowed;
1161 	memcpy(avd, &node->ae.avd, sizeof(*avd));
1166 				  flags, avd);
1189 	struct av_decision avd;
1193 				  &avd);
1195 	rc2 = avc_audit(ssid, tsid, tclass, requested, &avd, rc,