• Home
  • History
  • Annotate
  • Raw
  • Download
  • only in /netgear-R7000-V1.0.7.12_1.2.5/components/opensource/linux/linux-2.6.36/security/selinux/ss/

Lines Matching defs:avd

98 				      struct av_decision *avd);
203 static void map_decision(u16 tclass, struct av_decision *avd,
211 if (avd->allowed & current_mapping[tclass].perms[i])
216 avd->allowed = result;
219 if (avd->auditallow & current_mapping[tclass].perms[i])
221 avd->auditallow = result;
224 if (avd->auditdeny & current_mapping[tclass].perms[i])
236 avd->auditdeny = result;
527 struct av_decision *avd)
548 if ((lo_avd.allowed & avd->allowed) == avd->allowed)
550 masked = ~lo_avd.allowed & avd->allowed;
563 if ((lo_avd.allowed & avd->allowed) == avd->allowed)
565 masked = ~lo_avd.allowed & avd->allowed;
579 if ((lo_avd.allowed & avd->allowed) == avd->allowed)
581 masked = ~lo_avd.allowed & avd->allowed;
586 avd->allowed &= ~masked;
601 struct av_decision *avd)
612 avd->allowed = 0;
613 avd->auditallow = 0;
614 avd->auditdeny = 0xffffffff;
642 avd->allowed |= node->datum.data;
644 avd->auditallow |= node->datum.data;
646 avd->auditdeny &= node->datum.data;
650 cond_compute_av(&policydb.te_cond_avtab, &avkey, avd);
661 if ((constraint->permissions & (avd->allowed)) &&
664 avd->allowed &= ~(constraint->permissions);
675 (avd->allowed & policydb.process_trans_perms) &&
683 avd->allowed &= ~policydb.process_trans_perms;
692 tclass, avd);
871 static void avd_init(struct av_decision *avd)
873 avd->allowed = 0;
874 avd->auditallow = 0;
875 avd->auditdeny = 0xffffffff;
876 avd->seqno = latest_granting;
877 avd->flags = 0;
886 * @avd: access vector decisions
894 struct av_decision *avd)
900 avd_init(avd);
913 avd->flags |= AVD_FLAGS_PERMISSIVE;
928 context_struct_compute_av(scontext, tcontext, tclass, avd);
929 map_decision(orig_tclass, avd, policydb.allow_unknown);
934 avd->allowed = 0xffffffff;
941 struct av_decision *avd)
946 avd_init(avd);
959 avd->flags |= AVD_FLAGS_PERMISSIVE;
974 context_struct_compute_av(scontext, tcontext, tclass, avd);
979 avd->allowed = 0xffffffff;