Lines Matching refs:f
312 struct audit_field *f, in audit_compare_uid() argument
319 rc = audit_uid_comparator(uid, f->op, name->uid); in audit_compare_uid()
326 rc = audit_uid_comparator(uid, f->op, n->uid); in audit_compare_uid()
336 struct audit_field *f, in audit_compare_gid() argument
343 rc = audit_gid_comparator(gid, f->op, name->gid); in audit_compare_gid()
350 rc = audit_gid_comparator(gid, f->op, n->gid); in audit_compare_gid()
360 struct audit_field *f, in audit_field_compare() argument
364 switch (f->val) { in audit_field_compare()
367 return audit_compare_uid(cred->uid, name, f, ctx); in audit_field_compare()
369 return audit_compare_gid(cred->gid, name, f, ctx); in audit_field_compare()
371 return audit_compare_uid(cred->euid, name, f, ctx); in audit_field_compare()
373 return audit_compare_gid(cred->egid, name, f, ctx); in audit_field_compare()
375 return audit_compare_uid(tsk->loginuid, name, f, ctx); in audit_field_compare()
377 return audit_compare_uid(cred->suid, name, f, ctx); in audit_field_compare()
379 return audit_compare_gid(cred->sgid, name, f, ctx); in audit_field_compare()
381 return audit_compare_uid(cred->fsuid, name, f, ctx); in audit_field_compare()
383 return audit_compare_gid(cred->fsgid, name, f, ctx); in audit_field_compare()
386 return audit_uid_comparator(cred->uid, f->op, tsk->loginuid); in audit_field_compare()
388 return audit_uid_comparator(cred->uid, f->op, cred->euid); in audit_field_compare()
390 return audit_uid_comparator(cred->uid, f->op, cred->suid); in audit_field_compare()
392 return audit_uid_comparator(cred->uid, f->op, cred->fsuid); in audit_field_compare()
395 return audit_uid_comparator(tsk->loginuid, f->op, cred->euid); in audit_field_compare()
397 return audit_uid_comparator(tsk->loginuid, f->op, cred->suid); in audit_field_compare()
399 return audit_uid_comparator(tsk->loginuid, f->op, cred->fsuid); in audit_field_compare()
402 return audit_uid_comparator(cred->euid, f->op, cred->suid); in audit_field_compare()
404 return audit_uid_comparator(cred->euid, f->op, cred->fsuid); in audit_field_compare()
407 return audit_uid_comparator(cred->suid, f->op, cred->fsuid); in audit_field_compare()
410 return audit_gid_comparator(cred->gid, f->op, cred->egid); in audit_field_compare()
412 return audit_gid_comparator(cred->gid, f->op, cred->sgid); in audit_field_compare()
414 return audit_gid_comparator(cred->gid, f->op, cred->fsgid); in audit_field_compare()
417 return audit_gid_comparator(cred->egid, f->op, cred->sgid); in audit_field_compare()
419 return audit_gid_comparator(cred->egid, f->op, cred->fsgid); in audit_field_compare()
422 return audit_gid_comparator(cred->sgid, f->op, cred->fsgid); in audit_field_compare()
452 struct audit_field *f = &rule->fields[i]; in audit_filter_rules() local
457 switch (f->type) { in audit_filter_rules()
460 result = audit_comparator(pid, f->op, f->val); in audit_filter_rules()
466 result = audit_comparator(ctx->ppid, f->op, f->val); in audit_filter_rules()
470 result = audit_uid_comparator(cred->uid, f->op, f->uid); in audit_filter_rules()
473 result = audit_uid_comparator(cred->euid, f->op, f->uid); in audit_filter_rules()
476 result = audit_uid_comparator(cred->suid, f->op, f->uid); in audit_filter_rules()
479 result = audit_uid_comparator(cred->fsuid, f->op, f->uid); in audit_filter_rules()
482 result = audit_gid_comparator(cred->gid, f->op, f->gid); in audit_filter_rules()
483 if (f->op == Audit_equal) { in audit_filter_rules()
485 result = in_group_p(f->gid); in audit_filter_rules()
486 } else if (f->op == Audit_not_equal) { in audit_filter_rules()
488 result = !in_group_p(f->gid); in audit_filter_rules()
492 result = audit_gid_comparator(cred->egid, f->op, f->gid); in audit_filter_rules()
493 if (f->op == Audit_equal) { in audit_filter_rules()
495 result = in_egroup_p(f->gid); in audit_filter_rules()
496 } else if (f->op == Audit_not_equal) { in audit_filter_rules()
498 result = !in_egroup_p(f->gid); in audit_filter_rules()
502 result = audit_gid_comparator(cred->sgid, f->op, f->gid); in audit_filter_rules()
505 result = audit_gid_comparator(cred->fsgid, f->op, f->gid); in audit_filter_rules()
508 result = audit_comparator(tsk->personality, f->op, f->val); in audit_filter_rules()
512 result = audit_comparator(ctx->arch, f->op, f->val); in audit_filter_rules()
517 result = audit_comparator(ctx->return_code, f->op, f->val); in audit_filter_rules()
521 if (f->val) in audit_filter_rules()
522 result = audit_comparator(ctx->return_valid, f->op, AUDITSC_SUCCESS); in audit_filter_rules()
524 result = audit_comparator(ctx->return_valid, f->op, AUDITSC_FAILURE); in audit_filter_rules()
529 if (audit_comparator(MAJOR(name->dev), f->op, f->val) || in audit_filter_rules()
530 audit_comparator(MAJOR(name->rdev), f->op, f->val)) in audit_filter_rules()
534 if (audit_comparator(MAJOR(n->dev), f->op, f->val) || in audit_filter_rules()
535 audit_comparator(MAJOR(n->rdev), f->op, f->val)) { in audit_filter_rules()
544 if (audit_comparator(MINOR(name->dev), f->op, f->val) || in audit_filter_rules()
545 audit_comparator(MINOR(name->rdev), f->op, f->val)) in audit_filter_rules()
549 if (audit_comparator(MINOR(n->dev), f->op, f->val) || in audit_filter_rules()
550 audit_comparator(MINOR(n->rdev), f->op, f->val)) { in audit_filter_rules()
559 result = audit_comparator(name->ino, f->op, f->val); in audit_filter_rules()
562 if (audit_comparator(n->ino, f->op, f->val)) { in audit_filter_rules()
571 result = audit_uid_comparator(name->uid, f->op, f->uid); in audit_filter_rules()
574 if (audit_uid_comparator(n->uid, f->op, f->uid)) { in audit_filter_rules()
583 result = audit_gid_comparator(name->gid, f->op, f->gid); in audit_filter_rules()
586 if (audit_gid_comparator(n->gid, f->op, f->gid)) { in audit_filter_rules()
604 result = audit_uid_comparator(tsk->loginuid, f->op, f->uid); in audit_filter_rules()
607 result = audit_comparator(audit_loginuid_set(tsk), f->op, f->val); in audit_filter_rules()
619 if (f->lsm_rule) { in audit_filter_rules()
624 result = security_audit_rule_match(sid, f->type, in audit_filter_rules()
625 f->op, in audit_filter_rules()
626 f->lsm_rule, in audit_filter_rules()
637 if (f->lsm_rule) { in audit_filter_rules()
641 name->osid, f->type, f->op, in audit_filter_rules()
642 f->lsm_rule, ctx); in audit_filter_rules()
645 if (security_audit_rule_match(n->osid, f->type, in audit_filter_rules()
646 f->op, f->lsm_rule, in audit_filter_rules()
657 f->type, f->op, in audit_filter_rules()
658 f->lsm_rule, ctx)) in audit_filter_rules()
667 result = audit_comparator(ctx->argv[f->type-AUDIT_ARG0], f->op, f->val); in audit_filter_rules()
674 result = audit_match_perm(ctx, f->val); in audit_filter_rules()
677 result = audit_match_filetype(ctx, f->val); in audit_filter_rules()
680 result = audit_field_compare(tsk, cred, f, ctx, name); in audit_filter_rules()