52 	unsigned int flags;  member
78 	{.action = DONT_MEASURE, .fsmagic = PROC_SUPER_MAGIC, .flags = IMA_FSMAGIC},
79 	{.action = DONT_MEASURE, .fsmagic = SYSFS_MAGIC, .flags = IMA_FSMAGIC},
80 	{.action = DONT_MEASURE, .fsmagic = DEBUGFS_MAGIC, .flags = IMA_FSMAGIC},
81 	{.action = DONT_MEASURE, .fsmagic = TMPFS_MAGIC, .flags = IMA_FSMAGIC},
82 	{.action = DONT_MEASURE, .fsmagic = DEVPTS_SUPER_MAGIC, .flags = IMA_FSMAGIC},
83 	{.action = DONT_MEASURE, .fsmagic = BINFMTFS_MAGIC, .flags = IMA_FSMAGIC},
84 	{.action = DONT_MEASURE, .fsmagic = SECURITYFS_MAGIC, .flags = IMA_FSMAGIC},
85 	{.action = DONT_MEASURE, .fsmagic = SELINUX_MAGIC, .flags = IMA_FSMAGIC},
87 	 .flags = IMA_FSMAGIC},
88 	{.action = DONT_MEASURE, .fsmagic = NSFS_MAGIC, .flags = IMA_FSMAGIC}
93 	 .flags = IMA_FUNC | IMA_MASK},
95 	 .flags = IMA_FUNC | IMA_MASK},
97 	 .uid = GLOBAL_ROOT_UID, .flags = IMA_FUNC | IMA_MASK | IMA_UID},
98 	{.action = MEASURE, .func = MODULE_CHECK, .flags = IMA_FUNC},
99 	{.action = MEASURE, .func = FIRMWARE_CHECK, .flags = IMA_FUNC},
104 	 .flags = IMA_FUNC | IMA_MASK},
106 	 .flags = IMA_FUNC | IMA_MASK},
108 	 .uid = GLOBAL_ROOT_UID, .flags = IMA_FUNC | IMA_INMASK | IMA_EUID},
110 	 .uid = GLOBAL_ROOT_UID, .flags = IMA_FUNC | IMA_INMASK | IMA_UID},
111 	{.action = MEASURE, .func = MODULE_CHECK, .flags = IMA_FUNC},
112 	{.action = MEASURE, .func = FIRMWARE_CHECK, .flags = IMA_FUNC},
116 	{.action = DONT_APPRAISE, .fsmagic = PROC_SUPER_MAGIC, .flags = IMA_FSMAGIC},
117 	{.action = DONT_APPRAISE, .fsmagic = SYSFS_MAGIC, .flags = IMA_FSMAGIC},
118 	{.action = DONT_APPRAISE, .fsmagic = DEBUGFS_MAGIC, .flags = IMA_FSMAGIC},
119 	{.action = DONT_APPRAISE, .fsmagic = TMPFS_MAGIC, .flags = IMA_FSMAGIC},
120 	{.action = DONT_APPRAISE, .fsmagic = RAMFS_MAGIC, .flags = IMA_FSMAGIC},
121 	{.action = DONT_APPRAISE, .fsmagic = DEVPTS_SUPER_MAGIC, .flags = IMA_FSMAGIC},
122 	{.action = DONT_APPRAISE, .fsmagic = BINFMTFS_MAGIC, .flags = IMA_FSMAGIC},
123 	{.action = DONT_APPRAISE, .fsmagic = SECURITYFS_MAGIC, .flags = IMA_FSMAGIC},
124 	{.action = DONT_APPRAISE, .fsmagic = SELINUX_MAGIC, .flags = IMA_FSMAGIC},
125 	{.action = DONT_APPRAISE, .fsmagic = NSFS_MAGIC, .flags = IMA_FSMAGIC},
126 	{.action = DONT_APPRAISE, .fsmagic = CGROUP_SUPER_MAGIC, .flags = IMA_FSMAGIC},
128 	{.action = APPRAISE, .fowner = GLOBAL_ROOT_UID, .flags = IMA_FOWNER},
132 	 .flags = IMA_FOWNER | IMA_DIGSIG_REQUIRED},
218 	if ((rule->flags & IMA_FUNC) &&  in ima_match_rules()
221 	if ((rule->flags & IMA_MASK) &&  in ima_match_rules()
224 	if ((rule->flags & IMA_INMASK) &&  in ima_match_rules()
227 	if ((rule->flags & IMA_FSMAGIC)  in ima_match_rules()
230 	if ((rule->flags & IMA_FSUUID) &&  in ima_match_rules()
233 	if ((rule->flags & IMA_UID) && !uid_eq(rule->uid, cred->uid))  in ima_match_rules()
235 	if (rule->flags & IMA_EUID) {  in ima_match_rules()
245 	if ((rule->flags & IMA_FOWNER) && !uid_eq(rule->fowner, inode->i_uid))  in ima_match_rules()
295 	if (!(rule->flags & IMA_FUNC))  in get_subaction()
327 		     int flags)  in ima_match_policy()  argument
330 	int action = 0, actmask = flags | (flags << 1);  in ima_match_policy()
340 		action |= entry->flags & IMA_ACTION_FLAGS;  in ima_match_policy()
585 				entry->flags |= IMA_FUNC;  in ima_parse_rule()
608 				entry->flags |= (*args[0].from == '^')  in ima_parse_rule()
621 				entry->flags |= IMA_FSMAGIC;  in ima_parse_rule()
635 				entry->flags |= IMA_FSUUID;  in ima_parse_rule()
656 					entry->flags |= (token == Opt_uid)  in ima_parse_rule()
674 					entry->flags |= IMA_FOWNER;  in ima_parse_rule()
721 				entry->flags |= IMA_DIGSIG_REQUIRED;  in ima_parse_rule()
726 			entry->flags |= IMA_PERMIT_DIRECTIO;  in ima_parse_rule()