Lines Matching defs:layer
155 * by a ruleset/layer. This must be ORed with all ruleset->fs_access_masks[]
228 * Returns true if the request is allowed (i.e. relevant layer masks for the
244 * An access is granted if, for each policy layer, at least one rule
246 * regardless of its position in the layer stack. We must then check
247 * the remaining layers for each inode, from the first added layer to
249 * policy layer, the full set of requested accesses may not be granted
254 const struct landlock_layer *const layer =
256 const layer_mask_t layer_bit = BIT_ULL(layer->level - 1);
262 * Records in @layer_masks which layer grants access to each
268 if (layer->access & BIT_ULL(access_bit))
302 * init_layer_masks - Initialize layer masks from an access request
309 * @layer_masks: The layer masks to populate.
327 /* Saves all handled accesses per layer. */
456 * @layer_masks_parent1: Pointer to a matrix of layer masks per access
461 * initially refer to domain layer masks and, when the accesses for the
462 * destination and source are the same, to requested layer masks.
602 /* Stops when a rule from each layer grants access. */
742 * least one rule in each layer.
794 * rights that are denied per layer. These matrices are then compared to see
1242 * vetoed by any layer.