security/landlock/audit.c

141

get_hierarchy(const struct landlock_ruleset *const domain, const size_t layer)

security/landlock/audit.c

174

struct landlock_ruleset dom2 = {

security/landlock/audit.c

188

static size_t get_denied_layer(const struct landlock_ruleset *const domain,

security/landlock/audit.c

208

const struct landlock_ruleset dom = {

security/landlock/cred.c

38

struct landlock_ruleset *const dom = landlock_cred(cred)->domain;

security/landlock/cred.h

129

const struct landlock_ruleset *domain;

security/landlock/cred.h

36

struct landlock_ruleset *domain;

security/landlock/cred.h

80

static inline struct landlock_ruleset *landlock_get_current_domain(void)

security/landlock/cred.h

88

static inline const struct landlock_ruleset *

security/landlock/fs.c

1042

static bool collect_domain_accesses(const struct landlock_ruleset *const domain,

security/landlock/fs.c

1592

static void unmask_scoped_access(const struct landlock_ruleset *const client,

security/landlock/fs.c

1593

const struct landlock_ruleset *const server,

security/landlock/fs.c

1647

const struct landlock_ruleset *dom_other;

security/landlock/fs.c

1942

struct landlock_ruleset *prev_dom;

security/landlock/fs.c

326

int landlock_append_fs_rule(struct landlock_ruleset *const ruleset,

security/landlock/fs.c

367

find_rule(const struct landlock_ruleset *const domain,

security/landlock/fs.c

752

is_access_to_paths_allowed(const struct landlock_ruleset *const domain,

security/landlock/fs.h

152

int landlock_append_fs_rule(struct landlock_ruleset *const ruleset,

security/landlock/net.c

22

int landlock_append_net_rule(struct landlock_ruleset *const ruleset,

security/landlock/net.h

18

int landlock_append_net_rule(struct landlock_ruleset *const ruleset,

security/landlock/net.h

27

landlock_append_net_rule(struct landlock_ruleset *const ruleset, const u16 port,

security/landlock/ruleset.c

148

static struct rb_root *get_root(struct landlock_ruleset *const ruleset,

security/landlock/ruleset.c

179

const struct landlock_ruleset ruleset = {

security/landlock/ruleset.c

208

static int insert_rule(struct landlock_ruleset *const ruleset,

security/landlock/ruleset.c

308

int landlock_insert_rule(struct landlock_ruleset *const ruleset,

security/landlock/ruleset.c

32

static struct landlock_ruleset *create_ruleset(const u32 num_layers)

security/landlock/ruleset.c

325

static int merge_tree(struct landlock_ruleset *const dst,

security/landlock/ruleset.c

326

struct landlock_ruleset *const src,

security/landlock/ruleset.c

34

struct landlock_ruleset *new_ruleset;

security/landlock/ruleset.c

368

static int merge_ruleset(struct landlock_ruleset *const dst,

security/landlock/ruleset.c

369

struct landlock_ruleset *const src)

security/landlock/ruleset.c

411

static int inherit_tree(struct landlock_ruleset *const parent,

security/landlock/ruleset.c

412

struct landlock_ruleset *const child,

security/landlock/ruleset.c

443

static int inherit_ruleset(struct landlock_ruleset *const parent,

security/landlock/ruleset.c

444

struct landlock_ruleset *const child)

security/landlock/ruleset.c

489

static void free_ruleset(struct landlock_ruleset *const ruleset)

security/landlock/ruleset.c

508

void landlock_put_ruleset(struct landlock_ruleset *const ruleset)

security/landlock/ruleset.c

517

struct landlock_ruleset *ruleset;

security/landlock/ruleset.c

519

ruleset = container_of(work, struct landlock_ruleset, work_free);

security/landlock/ruleset.c

524

void landlock_put_ruleset_deferred(struct landlock_ruleset *const ruleset)

security/landlock/ruleset.c

544

struct landlock_ruleset *

security/landlock/ruleset.c

545

landlock_merge_ruleset(struct landlock_ruleset *const parent,

security/landlock/ruleset.c

546

struct landlock_ruleset *const ruleset)

security/landlock/ruleset.c

548

struct landlock_ruleset *new_dom __free(landlock_put_ruleset) = NULL;

security/landlock/ruleset.c

57

struct landlock_ruleset *

security/landlock/ruleset.c

601

landlock_find_rule(const struct landlock_ruleset *const ruleset,

security/landlock/ruleset.c

607

root = get_root((struct landlock_ruleset *)ruleset, id.type);

security/landlock/ruleset.c

62

struct landlock_ruleset *new_ruleset;

security/landlock/ruleset.c

679

get_access_mask_t(const struct landlock_ruleset *const ruleset,

security/landlock/ruleset.c

698

landlock_init_layer_masks(const struct landlock_ruleset *const domain,

security/landlock/ruleset.h

209

struct landlock_ruleset *

security/landlock/ruleset.h

214

void landlock_put_ruleset(struct landlock_ruleset *const ruleset);

security/landlock/ruleset.h

215

void landlock_put_ruleset_deferred(struct landlock_ruleset *const ruleset);

security/landlock/ruleset.h

217

DEFINE_FREE(landlock_put_ruleset, struct landlock_ruleset *,

security/landlock/ruleset.h

220

int landlock_insert_rule(struct landlock_ruleset *const ruleset,

security/landlock/ruleset.h

224

struct landlock_ruleset *

security/landlock/ruleset.h

225

landlock_merge_ruleset(struct landlock_ruleset *const parent,

security/landlock/ruleset.h

226

struct landlock_ruleset *const ruleset);

security/landlock/ruleset.h

229

landlock_find_rule(const struct landlock_ruleset *const ruleset,

security/landlock/ruleset.h

232

static inline void landlock_get_ruleset(struct landlock_ruleset *const ruleset)

security/landlock/ruleset.h

247

landlock_union_access_masks(const struct landlock_ruleset *const domain)

security/landlock/ruleset.h

264

landlock_add_fs_access_mask(struct landlock_ruleset *const ruleset,

security/landlock/ruleset.h

276

landlock_add_net_access_mask(struct landlock_ruleset *const ruleset,

security/landlock/ruleset.h

288

landlock_add_scope_mask(struct landlock_ruleset *const ruleset,

security/landlock/ruleset.h

299

landlock_get_fs_access_mask(const struct landlock_ruleset *const ruleset,

security/landlock/ruleset.h

308

landlock_get_net_access_mask(const struct landlock_ruleset *const ruleset,

security/landlock/ruleset.h

315

landlock_get_scope_mask(const struct landlock_ruleset *const ruleset,

security/landlock/ruleset.h

325

landlock_init_layer_masks(const struct landlock_ruleset *const domain,

security/landlock/syscalls.c

130

struct landlock_ruleset *ruleset = filp->private_data;

security/landlock/syscalls.c

214

struct landlock_ruleset *ruleset;

security/landlock/syscalls.c

296

static struct landlock_ruleset *get_ruleset_from_fd(const int fd,

security/landlock/syscalls.c

300

struct landlock_ruleset *ruleset;

security/landlock/syscalls.c

347

static int add_rule_path_beneath(struct landlock_ruleset *const ruleset,

security/landlock/syscalls.c

390

static int add_rule_net_port(struct landlock_ruleset *ruleset,

security/landlock/syscalls.c

470

struct landlock_ruleset *ruleset __free(landlock_put_ruleset) = NULL;

security/landlock/syscalls.c

529

struct landlock_ruleset *ruleset __free(landlock_put_ruleset) = NULL;

security/landlock/syscalls.c

598

struct landlock_ruleset *const new_dom =

security/landlock/task.c

138

const struct landlock_ruleset *child_dom;

security/landlock/task.c

179

static bool domain_is_scoped(const struct landlock_ruleset *const client,

security/landlock/task.c

180

const struct landlock_ruleset *const server,

security/landlock/task.c

239

const struct landlock_ruleset *const domain)

security/landlock/task.c

241

const struct landlock_ruleset *dom_other;

security/landlock/task.c

44

static bool domain_scope_le(const struct landlock_ruleset *const parent,

security/landlock/task.c

45

const struct landlock_ruleset *const child)

security/landlock/task.c

66

static int domain_ptrace(const struct landlock_ruleset *const parent,

security/landlock/task.c

67

const struct landlock_ruleset *const child)

security/landlock/task.c

99

const struct landlock_ruleset *const child_dom =