Lines Matching refs:object
45 to an object with another
74 the label given to a new filesystem object will be the label
86 on a directory when an object is created in the directory and
88 to the directory includes the transmute ("t") mode the object
90 creating process. If the object being created is a directory
118 Smack label has a particular access to an object with a
125 Smack label has a particular access to an object with a
138 object label, the third the access to allow and the fourth the
140 "rwxat-". If a rule for a given subject and object exists it will be
186 object label, and the third the requested access. The access
198 object label, and the third the requested access. The access
242 object. For the PTRACE_ATTACH a read-write access is required.
244 only allowed when subject's and object's labels are equal.
276 object with objectlabel. If there is no rule no access is allowed.
339 Object: An object is a passive entity on the computer system.
343 information from an object is an access.
346 characteristics of a subject or an object.
366 each of the subject and the object.
399 the object task.
404 attached to the object it is trying to access. The rules enforced are, in
410 3. A read or execute access requested on an object labeled "_"
412 4. Any access requested on an object labeled "*" is permitted.
413 5. Any access requested by a task on an object with the same
433 subject-label object-label access
435 Where subject-label is the Smack label of the task, object-label is the Smack
492 access rule that allows a process to create an object in that directory
493 includes 't' access the label assigned to the new object will be that
499 namespaces and access requests are only required to match the object in
518 immediately. For any pair of subject and object labels there can be only
531 The Smack label of a filesystem object is stored as an extended attribute
605 SMACK64IPIN: The Smack label of the task object. A privileged
671 Smack label of a file, directory, or other file system object can be obtained
677 process can set the Smack label of a file system object with setxattr(2).
700 will set the Smack label "*" as the object label against which incoming
733 the subject, the object, the rights requested, the action, the kernel function
749 able to access any object, and objects with that label accessible to