Lines Matching defs:rule
201 * The lifetime of the returned rule is tied to @domain.
203 * Returns NULL if no rule is found or if @dentry is negative.
209 const struct landlock_rule *rule;
218 rule = landlock_find_rule(
221 return rule;
226 * the matching rule.
232 unmask_layers(const struct landlock_rule *const rule,
240 if (!rule)
244 * An access is granted if, for each policy layer, at least one rule
250 * by only one rule, but by the union (binary OR) of multiple rules.
253 for (layer_level = 0; layer_level < rule->num_layers; layer_level++) {
255 &rule->layers[layer_level];
558 const struct landlock_rule *rule;
596 rule = find_rule(domain, walker_path.dentry);
597 allowed_parent1 = unmask_layers(rule, access_masked_parent1,
599 allowed_parent2 = unmask_layers(rule, access_masked_parent2,
602 /* Stops when a rule from each layer grants access. */
742 * least one rule in each layer.