Lines Matching refs:rights
2 * Copyright (c) 2004-2007 Apple Inc. All rights reserved.
9 * compliance with the License. The rights granted to you under the License
23 * Please see the License for the specific language governing rights and
607 * Determines whether the credential has the requested rights for an object secured by the supplied
611 * rights, or granted if all of the requested rights are satisfied by the ACEs so far.
619 uint32_t rights;
650 * Expand generic rights, if appropriate.
652 rights = ace->ace_rights;
653 if (rights & KAUTH_ACE_GENERIC_ALL)
654 rights |= eval->ae_exp_gall;
655 if (rights & KAUTH_ACE_GENERIC_READ)
656 rights |= eval->ae_exp_gread;
657 if (rights & KAUTH_ACE_GENERIC_WRITE)
658 rights |= eval->ae_exp_gwrite;
659 if (rights & KAUTH_ACE_GENERIC_EXECUTE)
660 rights |= eval->ae_exp_gexec;
669 if (!(eval->ae_residual & rights))
673 if (!(eval->ae_requested & rights))
736 * Apply ACE to outstanding rights.
740 /* satisfy any rights that this ACE grants */
741 eval->ae_residual = eval->ae_residual & ~rights;
742 KAUTH_DEBUG(" ACL[%d] - rights %x leave residual %x", i, rights, eval->ae_residual);
743 /* all rights satisfied? */
750 /* deny the request if any of the requested rights is denied */
751 if (eval->ae_requested & rights) {
752 KAUTH_DEBUG(" ACL[%d] - denying based on %x", i, rights);
1117 /* swap ACE rights and flags */