security/selinux/avc.c

385 static inline u32 avc_xperms_audit_required(u32 requested,
394 	denied = requested & ~avd->allowed;
399 				audited &= ~requested;
402 		audited = denied = requested;
404 		audited = requested & avd->auditallow;
407 				audited &= ~requested;
416 				   u32 requested, struct av_decision *avd,
424 			requested, avd, xpd, perm, result, &denied);
427 	return slow_avc_audit(ssid, tsid, tclass, requested,
757 			    u32 requested, u32 audited, u32 denied, int result,
772 	sad.requested = requested;
995 			       u16 tclass, u32 requested,
1006 	avc_update_node(AVC_CALLBACK_GRANT, requested, driver,
1018 int avc_has_extended_perms(u32 ssid, u32 tsid, u16 tclass, u32 requested,
1034 	if (WARN_ON(!requested))
1061 			avd.allowed &= ~requested;
1068 		avc_update_node(AVC_CALLBACK_ADD_XPERMS, requested,
1077 		avd.allowed &= ~requested;
1080 	denied = requested & ~(avd.allowed);
1082 		rc = avc_denied(ssid, tsid, tclass, requested,
1087 	rc2 = avc_xperms_audit(ssid, tsid, tclass, requested,
1099  * @requested: requested permissions
1108 				    u32 requested, unsigned int flags,
1115 	denied = requested & ~(avd->allowed);
1117 		return avc_denied(ssid, tsid, tclass, requested, 0, 0,
1127  * @requested: requested permissions, interpreted based on @tclass
1131  * Check the AVC to determine whether the @requested permissions are granted
1135  * in @avd.  Return %0 if all @requested permissions are granted,
1143 				u16 tclass, u32 requested,
1150 	if (WARN_ON(!requested))
1157 		return avc_perm_nonode(ssid, tsid, tclass, requested,
1160 	denied = requested & ~node->ae.avd.allowed;
1165 		return avc_denied(ssid, tsid, tclass, requested, 0, 0,
1175  * @requested: requested permissions, interpreted based on @tclass
1178  * Check the AVC to determine whether the @requested permissions are granted
1182  * permissions in accordance with the policy.  Return %0 if all @requested
1187 		 u32 requested, struct common_audit_data *auditdata)
1192 	rc = avc_has_perm_noaudit(ssid, tsid, tclass, requested, 0,
1195 	rc2 = avc_audit(ssid, tsid, tclass, requested, &avd, rc,