Lines Matching refs:object
41 to an object with another
70 the label given to a new filesystem object will be the label
82 on a directory when an object is created in the directory and
84 to the directory includes the transmute ("t") mode the object
86 creating process. If the object being created is a directory
112 Smack label has a particular access to an object with a
119 Smack label has a particular access to an object with a
132 object label, the third the access to allow and the fourth the
134 "rwxat-". If a rule for a given subject and object exists it will be
166 object label, and the third the requested access. The access
178 object label, and the third the requested access. The access
218 object. For the PTRACE_ATTACH a read-write access is required.
220 only allowed when subject's and object's labels are equal.
241 object with objectlabel. If there is no rule no access is allowed.
304 Object: An object is a passive entity on the computer system.
308 information from an object is an access.
311 characteristics of a subject or an object.
331 each of the subject and the object.
364 the object task.
369 attached to the object it is trying to access. The rules enforced are, in
375 3. A read or execute access requested on an object labeled "_"
377 4. Any access requested on an object labeled "*" is permitted.
378 5. Any access requested by a task on an object with the same
398 subject-label object-label access
400 Where subject-label is the Smack label of the task, object-label is the Smack
457 access rule that allows a process to create an object in that directory
458 includes 't' access the label assigned to the new object will be that
464 namespaces and access requests are only required to match the object in
483 immediately. For any pair of subject and object labels there can be only
496 The Smack label of a filesystem object is stored as an extended attribute
570 SMACK64IPIN: The Smack label of the task object. A privileged
636 Smack label of a file, directory, or other file system object can be obtained
642 process can set the Smack label of a file system object with setxattr(2).
665 will set the Smack label "*" as the object label against which incoming
698 the subject, the object, the rights requested, the action, the kernel function
714 able to access any object, and objects with that label accessible to