Lines Matching refs:avd
98 struct av_decision *avd,
219 static void map_decision(u16 tclass, struct av_decision *avd, in map_decision() argument
227 if (avd->allowed & current_mapping[tclass].perms[i]) in map_decision()
232 avd->allowed = result; in map_decision()
235 if (avd->auditallow & current_mapping[tclass].perms[i]) in map_decision()
237 avd->auditallow = result; in map_decision()
240 if (avd->auditdeny & current_mapping[tclass].perms[i]) in map_decision()
252 avd->auditdeny = result; in map_decision()
543 struct av_decision *avd) in type_attribute_bounds_av() argument
571 if ((lo_avd.allowed & avd->allowed) == avd->allowed) in type_attribute_bounds_av()
573 masked = ~lo_avd.allowed & avd->allowed; in type_attribute_bounds_av()
587 if ((lo_avd.allowed & avd->allowed) == avd->allowed) in type_attribute_bounds_av()
589 masked = ~lo_avd.allowed & avd->allowed; in type_attribute_bounds_av()
604 if ((lo_avd.allowed & avd->allowed) == avd->allowed) in type_attribute_bounds_av()
606 masked = ~lo_avd.allowed & avd->allowed; in type_attribute_bounds_av()
611 avd->allowed &= ~masked; in type_attribute_bounds_av()
651 struct av_decision *avd, in context_struct_compute_av() argument
663 avd->allowed = 0; in context_struct_compute_av()
664 avd->auditallow = 0; in context_struct_compute_av()
665 avd->auditdeny = 0xffffffff; in context_struct_compute_av()
697 avd->allowed |= node->datum.u.data; in context_struct_compute_av()
699 avd->auditallow |= node->datum.u.data; in context_struct_compute_av()
701 avd->auditdeny &= node->datum.u.data; in context_struct_compute_av()
708 avd, xperms); in context_struct_compute_av()
719 if ((constraint->permissions & (avd->allowed)) && in context_struct_compute_av()
722 avd->allowed &= ~(constraint->permissions); in context_struct_compute_av()
733 (avd->allowed & policydb.process_trans_perms) && in context_struct_compute_av()
741 avd->allowed &= ~policydb.process_trans_perms; in context_struct_compute_av()
750 tclass, avd); in context_struct_compute_av()
930 static void avd_init(struct av_decision *avd) in avd_init() argument
932 avd->allowed = 0; in avd_init()
933 avd->auditallow = 0; in avd_init()
934 avd->auditdeny = 0xffffffff; in avd_init()
935 avd->seqno = latest_granting; in avd_init()
936 avd->flags = 0; in avd_init()
1087 struct av_decision *avd, in security_compute_av() argument
1094 avd_init(avd); in security_compute_av()
1108 avd->flags |= AVD_FLAGS_PERMISSIVE; in security_compute_av()
1123 context_struct_compute_av(scontext, tcontext, tclass, avd, xperms); in security_compute_av()
1124 map_decision(orig_tclass, avd, policydb.allow_unknown); in security_compute_av()
1129 avd->allowed = 0xffffffff; in security_compute_av()
1136 struct av_decision *avd) in security_compute_av_user() argument
1141 avd_init(avd); in security_compute_av_user()
1154 avd->flags |= AVD_FLAGS_PERMISSIVE; in security_compute_av_user()
1169 context_struct_compute_av(scontext, tcontext, tclass, avd, NULL); in security_compute_av_user()
1174 avd->allowed = 0xffffffff; in security_compute_av_user()