security/landlock/audit.c

190

const struct layer_masks *masks)

security/landlock/audit.c

211

const struct layer_masks masks = {

security/landlock/audit.c

503

if (WARN_ON_ONCE(!(!!request->layer_masks ^

security/landlock/audit.c

507

if (WARN_ON_ONCE(request->layer_masks ||

security/landlock/audit.c

568

if (request->layer_masks) {

security/landlock/audit.c

571

request->layer_masks);

security/landlock/audit.c

573

request->layer_masks->layers[youngest_layer]

security/landlock/audit.h

46

const struct layer_masks *layer_masks;

security/landlock/domain.c

174

const deny_masks_t deny_masks, const struct layer_masks *const masks)

security/landlock/domain.c

225

const struct layer_masks *const masks)

security/landlock/domain.c

264

const struct layer_masks layers1 = {

security/landlock/domain.h

127

const struct layer_masks *const masks);

security/landlock/domain.h

131

const deny_masks_t deny_masks, const struct layer_masks *const masks);

security/landlock/fs.c

1045

struct layer_masks *layer_masks_dom)

security/landlock/fs.c

1151

struct layer_masks layer_masks_parent1 = {}, layer_masks_parent2 = {};

security/landlock/fs.c

1594

struct layer_masks *const masks,

security/landlock/fs.c

1649

struct layer_masks layer_masks;

security/landlock/fs.c

1670

&layer_masks, LANDLOCK_KEY_INODE);

security/landlock/fs.c

1687

unmask_scoped_access(subject->domain, dom_other, &layer_masks,

security/landlock/fs.c

1693

fs_resolve_unix.fs, &layer_masks,

security/landlock/fs.c

1753

struct layer_masks layer_masks = {};

security/landlock/fs.c

1783

full_access_request, &layer_masks,

security/landlock/fs.c

1785

&layer_masks, &request, NULL, 0, NULL, NULL, NULL)) {

security/landlock/fs.c

1794

for (size_t i = 0; i < ARRAY_SIZE(layer_masks.layers); i++)

security/landlock/fs.c

1795

allowed_access &= ~layer_masks.layers[i].access;

security/landlock/fs.c

1807

_LANDLOCK_ACCESS_FS_OPTIONAL, optional_access, &layer_masks);

security/landlock/fs.c

1811

landlock_file(file)->deny_masks, &layer_masks);

security/landlock/fs.c

409

static bool may_refer(const struct layer_masks *const src_parent,

security/landlock/fs.c

410

const struct layer_masks *const src_child,

security/landlock/fs.c

411

const struct layer_masks *const new_parent,

security/landlock/fs.c

439

static bool no_more_access(const struct layer_masks *const parent1,

security/landlock/fs.c

440

const struct layer_masks *const child1,

security/landlock/fs.c

442

const struct layer_masks *const parent2,

security/landlock/fs.c

443

const struct layer_masks *const child2,

security/landlock/fs.c

462

const struct layer_masks rx0 = {

security/landlock/fs.c

466

const struct layer_masks mx0 = {

security/landlock/fs.c

470

const struct layer_masks x0 = {

security/landlock/fs.c

473

const struct layer_masks x1 = {

security/landlock/fs.c

476

const struct layer_masks x01 = {

security/landlock/fs.c

480

const struct layer_masks allows_all = {};

security/landlock/fs.c

568

static bool is_layer_masks_allowed(const struct layer_masks *masks)

security/landlock/fs.c

583

struct layer_masks *masks)

security/landlock/fs.c

603

struct layer_masks masks = {};

security/landlock/fs.c

614

struct layer_masks masks = {

security/landlock/fs.c

634

struct layer_masks masks = {

security/landlock/fs.c

651

static bool is_eacces(const struct layer_masks *masks,

security/landlock/fs.c

673

const struct layer_masks masks = {};

security/landlock/fs.c

683

const struct layer_masks masks = {

security/landlock/fs.c

695

const struct layer_masks masks = {

security/landlock/fs.c

755

struct layer_masks *layer_masks_parent1,

security/landlock/fs.c

759

struct layer_masks *layer_masks_parent2,

security/landlock/fs.c

767

struct layer_masks _layer_masks_child1, _layer_masks_child2;

security/landlock/fs.c

768

struct layer_masks *layer_masks_child1 = NULL,

security/landlock/fs.c

945

log_request_parent1->layer_masks = layer_masks_parent1;

security/landlock/fs.c

953

log_request_parent2->layer_masks = layer_masks_parent2;

security/landlock/fs.c

968

struct layer_masks layer_masks;

security/landlock/fs.c

975

access_request, &layer_masks,

security/landlock/fs.c

978

&layer_masks, &request, NULL, 0, NULL,

security/landlock/net.c

111

&layer_masks, LANDLOCK_KEY_NET_PORT);

security/landlock/net.c

120

.layer_masks = &layer_masks,

security/landlock/net.c

242

access_request, &layer_masks,

security/landlock/net.c

247

if (landlock_unmask_layers(rule, &layer_masks))

security/landlock/net.c

258

.layer_masks = &layer_masks,

security/landlock/net.c

53

struct layer_masks layer_masks = {};

security/landlock/ruleset.c

641

struct layer_masks *masks)

security/landlock/ruleset.c

700

struct layer_masks *const masks,

security/landlock/ruleset.h

322

struct layer_masks *masks);

security/landlock/ruleset.h

327

struct layer_masks *masks,