Lines Matching refs:f
312 struct audit_field *f, in audit_compare_uid() argument
319 rc = audit_uid_comparator(uid, f->op, name->uid); in audit_compare_uid()
326 rc = audit_uid_comparator(uid, f->op, n->uid); in audit_compare_uid()
336 struct audit_field *f, in audit_compare_gid() argument
343 rc = audit_gid_comparator(gid, f->op, name->gid); in audit_compare_gid()
350 rc = audit_gid_comparator(gid, f->op, n->gid); in audit_compare_gid()
360 struct audit_field *f, in audit_field_compare() argument
364 switch (f->val) { in audit_field_compare()
367 return audit_compare_uid(cred->uid, name, f, ctx); in audit_field_compare()
369 return audit_compare_gid(cred->gid, name, f, ctx); in audit_field_compare()
371 return audit_compare_uid(cred->euid, name, f, ctx); in audit_field_compare()
373 return audit_compare_gid(cred->egid, name, f, ctx); in audit_field_compare()
375 return audit_compare_uid(tsk->loginuid, name, f, ctx); in audit_field_compare()
377 return audit_compare_uid(cred->suid, name, f, ctx); in audit_field_compare()
379 return audit_compare_gid(cred->sgid, name, f, ctx); in audit_field_compare()
381 return audit_compare_uid(cred->fsuid, name, f, ctx); in audit_field_compare()
383 return audit_compare_gid(cred->fsgid, name, f, ctx); in audit_field_compare()
386 return audit_uid_comparator(cred->uid, f->op, tsk->loginuid); in audit_field_compare()
388 return audit_uid_comparator(cred->uid, f->op, cred->euid); in audit_field_compare()
390 return audit_uid_comparator(cred->uid, f->op, cred->suid); in audit_field_compare()
392 return audit_uid_comparator(cred->uid, f->op, cred->fsuid); in audit_field_compare()
395 return audit_uid_comparator(tsk->loginuid, f->op, cred->euid); in audit_field_compare()
397 return audit_uid_comparator(tsk->loginuid, f->op, cred->suid); in audit_field_compare()
399 return audit_uid_comparator(tsk->loginuid, f->op, cred->fsuid); in audit_field_compare()
402 return audit_uid_comparator(cred->euid, f->op, cred->suid); in audit_field_compare()
404 return audit_uid_comparator(cred->euid, f->op, cred->fsuid); in audit_field_compare()
407 return audit_uid_comparator(cred->suid, f->op, cred->fsuid); in audit_field_compare()
410 return audit_gid_comparator(cred->gid, f->op, cred->egid); in audit_field_compare()
412 return audit_gid_comparator(cred->gid, f->op, cred->sgid); in audit_field_compare()
414 return audit_gid_comparator(cred->gid, f->op, cred->fsgid); in audit_field_compare()
417 return audit_gid_comparator(cred->egid, f->op, cred->sgid); in audit_field_compare()
419 return audit_gid_comparator(cred->egid, f->op, cred->fsgid); in audit_field_compare()
422 return audit_gid_comparator(cred->sgid, f->op, cred->fsgid); in audit_field_compare()
452 struct audit_field *f = &rule->fields[i]; in audit_filter_rules() local
457 switch (f->type) { in audit_filter_rules()
460 result = audit_comparator(pid, f->op, f->val); in audit_filter_rules()
466 result = audit_comparator(ctx->ppid, f->op, f->val); in audit_filter_rules()
473 result = audit_uid_comparator(cred->uid, f->op, f->uid); in audit_filter_rules()
476 result = audit_uid_comparator(cred->euid, f->op, f->uid); in audit_filter_rules()
479 result = audit_uid_comparator(cred->suid, f->op, f->uid); in audit_filter_rules()
482 result = audit_uid_comparator(cred->fsuid, f->op, f->uid); in audit_filter_rules()
485 result = audit_gid_comparator(cred->gid, f->op, f->gid); in audit_filter_rules()
486 if (f->op == Audit_equal) { in audit_filter_rules()
488 result = in_group_p(f->gid); in audit_filter_rules()
489 } else if (f->op == Audit_not_equal) { in audit_filter_rules()
491 result = !in_group_p(f->gid); in audit_filter_rules()
495 result = audit_gid_comparator(cred->egid, f->op, f->gid); in audit_filter_rules()
496 if (f->op == Audit_equal) { in audit_filter_rules()
498 result = in_egroup_p(f->gid); in audit_filter_rules()
499 } else if (f->op == Audit_not_equal) { in audit_filter_rules()
501 result = !in_egroup_p(f->gid); in audit_filter_rules()
505 result = audit_gid_comparator(cred->sgid, f->op, f->gid); in audit_filter_rules()
508 result = audit_gid_comparator(cred->fsgid, f->op, f->gid); in audit_filter_rules()
511 result = audit_comparator(tsk->personality, f->op, f->val); in audit_filter_rules()
515 result = audit_comparator(ctx->arch, f->op, f->val); in audit_filter_rules()
520 result = audit_comparator(ctx->return_code, f->op, f->val); in audit_filter_rules()
524 if (f->val) in audit_filter_rules()
525 result = audit_comparator(ctx->return_valid, f->op, AUDITSC_SUCCESS); in audit_filter_rules()
527 result = audit_comparator(ctx->return_valid, f->op, AUDITSC_FAILURE); in audit_filter_rules()
532 if (audit_comparator(MAJOR(name->dev), f->op, f->val) || in audit_filter_rules()
533 audit_comparator(MAJOR(name->rdev), f->op, f->val)) in audit_filter_rules()
537 if (audit_comparator(MAJOR(n->dev), f->op, f->val) || in audit_filter_rules()
538 audit_comparator(MAJOR(n->rdev), f->op, f->val)) { in audit_filter_rules()
547 if (audit_comparator(MINOR(name->dev), f->op, f->val) || in audit_filter_rules()
548 audit_comparator(MINOR(name->rdev), f->op, f->val)) in audit_filter_rules()
552 if (audit_comparator(MINOR(n->dev), f->op, f->val) || in audit_filter_rules()
553 audit_comparator(MINOR(n->rdev), f->op, f->val)) { in audit_filter_rules()
562 result = audit_comparator(name->ino, f->op, f->val); in audit_filter_rules()
565 if (audit_comparator(n->ino, f->op, f->val)) { in audit_filter_rules()
574 result = audit_uid_comparator(name->uid, f->op, f->uid); in audit_filter_rules()
577 if (audit_uid_comparator(n->uid, f->op, f->uid)) { in audit_filter_rules()
586 result = audit_gid_comparator(name->gid, f->op, f->gid); in audit_filter_rules()
589 if (audit_gid_comparator(n->gid, f->op, f->gid)) { in audit_filter_rules()
605 result = audit_uid_comparator(tsk->loginuid, f->op, f->uid); in audit_filter_rules()
608 result = audit_comparator(audit_loginuid_set(tsk), f->op, f->val); in audit_filter_rules()
620 if (f->lsm_rule) { in audit_filter_rules()
625 result = security_audit_rule_match(sid, f->type, in audit_filter_rules()
626 f->op, in audit_filter_rules()
627 f->lsm_rule, in audit_filter_rules()
638 if (f->lsm_rule) { in audit_filter_rules()
642 name->osid, f->type, f->op, in audit_filter_rules()
643 f->lsm_rule, ctx); in audit_filter_rules()
646 if (security_audit_rule_match(n->osid, f->type, in audit_filter_rules()
647 f->op, f->lsm_rule, in audit_filter_rules()
658 f->type, f->op, in audit_filter_rules()
659 f->lsm_rule, ctx)) in audit_filter_rules()
668 result = audit_comparator(ctx->argv[f->type-AUDIT_ARG0], f->op, f->val); in audit_filter_rules()
675 result = audit_match_perm(ctx, f->val); in audit_filter_rules()
678 result = audit_match_filetype(ctx, f->val); in audit_filter_rules()
681 result = audit_field_compare(tsk, cred, f, ctx, name); in audit_filter_rules()