Lines Matching refs:subj_cred
765 static int policy_ns_capable(const struct cred *subj_cred,
772 err = cap_capable(subj_cred, userns, cap, CAP_OPT_NONE);
774 err = aa_capable(subj_cred, label, cap, CAP_OPT_NONE);
781 * @subj_cred: cred of subject
790 bool aa_policy_view_capable(const struct cred *subj_cred,
793 struct user_namespace *user_ns = subj_cred->user_ns;
810 bool aa_policy_admin_capable(const struct cred *subj_cred,
813 struct user_namespace *user_ns = subj_cred->user_ns;
814 bool capable = policy_ns_capable(subj_cred, label, user_ns,
820 return aa_policy_view_capable(subj_cred, label, ns) && capable &&
850 * @subj_cred; subjects cred
857 int aa_may_manage_policy(const struct cred *subj_cred, struct aa_label *label,
874 if (!aa_policy_admin_capable(subj_cred, label, ns))