Lines Matching refs:onexec
732 struct aa_profile *profile, struct aa_label *onexec,
741 const char *xname = NULL, *info = "change_profile onexec";
745 AA_BUG(!onexec);
777 /* test if this exec can be paired with change_profile onexec.
778 * onexec permission is linked to exec with a standard pairing
782 error = change_profile_perms(profile, onexec, stack, AA_MAY_ONEXEC,
793 aa_label_printk(onexec, GFP_KERNEL);
802 NULL, onexec, cond->uid, info, error);
805 /* ensure none ns domain transitions are correctly applied with onexec */
809 struct aa_label *onexec, bool stack,
819 AA_BUG(!onexec);
825 profile_onexec(subj_cred, profile, onexec, stack,
830 aa_get_newest_label(onexec),
838 profile_onexec(subj_cred, profile, onexec, stack, bprm,
843 aa_label_merge(&profile->label, onexec,
858 onexec, GLOBAL_ROOT_UID,
913 /* Test for onexec first as onexec override other x transitions. */
914 if (ctx->onexec)
915 new = handle_onexec(subj_cred, label, ctx->onexec, ctx->token,
1320 * If @onexec then the transition is delayed until