Lines Matching defs:request
51 if (ad->request & AA_AUDIT_FILE_MASK) {
53 map_mask_to_chr_mask(ad->request));
61 if (ad->request & AA_AUDIT_FILE_MASK) {
82 * @perms: the permissions computed for the request (NOT NULL)
84 * @request: permissions requested
96 const char *op, u32 request, const char *name,
104 ad.request = request;
120 ad.request &= mask;
122 if (likely(!ad.request))
127 ad.request = ad.request & ~perms->allow;
128 AA_BUG(!ad.request);
130 if (ad.request & perms->kill)
134 if ((ad.request & perms->quiet) &&
137 ad.request &= ~perms->quiet;
139 if (!ad.request)
143 ad.denied = ad.request & ~perms->allow;
163 const char **name, struct path_cond *cond, u32 request)
174 profile, &nullperms, op, request, *name,
230 u32 request, struct path_cond *cond, int flags,
241 if (request & ~perms->allow)
244 profile, perms, op, request, name, NULL, NULL,
251 const struct path *path, char *buffer, u32 request,
263 request);
266 return __aa_path_perm(op, subj_cred, profile, name, request, cond,
277 * @request: requested permissions
278 * @cond: conditional info for this request (NOT NULL)
284 const struct path *path, int flags, u32 request,
299 request, cond, flags, &perms));
337 u32 request = AA_MAY_LINK;
391 request = lperms.allow & ~AA_MAY_LINK;
394 request |= AA_AUDIT_FILE_MASK & (lperms.allow & ~perms.allow);
395 if (request & ~lperms.allow) {
400 request |= MAY_EXEC;
410 profile, &lperms, OP_LINK, request, lname, tname,
464 u32 request)
479 fctx->allow |= request;
487 u32 request, u32 denied, bool in_atomic)
514 request, &cond, flags, &perms));
528 buffer, request, &cond, flags,
534 buffer, request, &cond, flags,
538 update_file_ctx(file_ctx(file), label, request);
548 u32 request, u32 denied)
560 error = aa_sock_file_perm(subj_cred, label, op, request, sock);
565 request, sock));
568 update_file_ctx(file_ctx(file), label, request);
579 * @request: requested permissions
586 u32 request, bool in_atomic)
603 * doesn't match or if the request is for more permissions than
609 denied = request & ~fctx->allow;
622 request, denied, in_atomic);
626 request, denied);