Lines Matching defs:profile
33 struct aa_profile *profile;
55 * @profile: profile being tested for confinement (NOT NULL)
64 static int audit_caps(struct common_audit_data *sa, struct aa_profile *profile,
74 if (likely((AUDIT_MODE(profile) != AUDIT_ALL) &&
75 !cap_raised(profile->caps.audit, cap)))
78 } else if (KILL_MODE(profile) ||
79 cap_raised(profile->caps.kill, cap)) {
81 } else if (cap_raised(profile->caps.quiet, cap) &&
82 AUDIT_MODE(profile) != AUDIT_NOQUIET &&
83 AUDIT_MODE(profile) != AUDIT_ALL) {
90 if (profile == ent->profile && cap_raised(ent->caps, cap)) {
92 if (COMPLAIN_MODE(profile))
96 aa_put_profile(ent->profile);
97 ent->profile = aa_get_profile(profile);
102 return aa_audit(type, profile, sa, audit_cb);
106 * profile_capable - test if profile allows use of capability @cap
107 * @profile: profile being enforced (NOT NULL, NOT unconfined)
114 static int profile_capable(struct aa_profile *profile, int cap,
119 if (cap_raised(profile->caps.allow, cap) &&
120 !cap_raised(profile->caps.denied, cap))
126 if (!COMPLAIN_MODE(profile))
134 return audit_caps(sa, profile, cap, error);
143 * Look up capability in profile capability set.
149 struct aa_profile *profile;
154 error = fn_for_each_confined(label, profile,
155 profile_capable(profile, cap, opts, &sa));