Lines Matching refs:decl
115 * to the object class. This means that the requirements for the decl are the union of the permissions
280 * not met, but we cannot because the decl might be optional (in which
1618 /* copy the scoping information for this avrule decl block */
1712 avrule_decl_t *decl, *last_decl = NULL;
1723 for (decl = block->branch_list; decl != NULL; decl = decl->next) {
1752 module->avdecl_map[decl->decl_id] = new_decl->decl_id;
1754 ret = copy_avrule_decl(state, module, decl, new_decl);
1810 * list with the new decl ids */
1928 avrule_decl_t * decl,
1948 bitmap = &decl->required.scope[i];
1963 for (i = 0; i < decl->required.class_perms_len; i++) {
1965 bitmap = decl->required.class_perms_map + i;
2121 * 2a) If the decl is non-optional, return immediately with an error.
2122 * 2b) If the decl is optional, disable the block and mark changed = 1
2125 * decl. If the block has an else decl, enable.
2134 avrule_decl_t *decl;
2146 for (decl = block->branch_list->next; decl != NULL;
2147 decl = decl->next)
2148 decl->enabled = 0;
2158 decl = block->branch_list;
2160 const char *mod_name = decl->module_name ?
2161 decl->module_name : "BASE";
2162 INFO(state->handle, "check module %s decl %d",
2163 mod_name, decl->decl_id);
2165 rc = is_decl_requires_met(state, decl, &req);
2170 decl->enabled = 0;
2187 * If the block is disabled and has an else decl, enable that.
2216 avrule_decl_t *decl;
2217 for (decl = block->branch_list; decl != NULL; decl = decl->next) {
2218 cond_list_t *cond = decl->cond_list;
2262 avrule_decl_t *decl;
2263 for (decl = cur->branch_list; decl != NULL; decl = decl->next) {
2264 if (decl->decl_id > num_decls) {
2265 num_decls = decl->decl_id;
2295 avrule_decl_t *decl;
2296 for (decl = cur->branch_list; decl != NULL; decl = decl->next) {
2297 if (decl->decl_id > state->next_decl_id) {
2298 state->next_decl_id = decl->decl_id;
2316 /* This allocates the decl block to module mapping used for error reporting */
2325 avrule_decl_t *decl = cur->branch_list;
2326 while (decl != NULL) {
2327 state->base->decl_val_to_struct[decl->decl_id - 1] =
2328 decl;
2329 state->decl_to_mod[decl->decl_id] = state->base;
2330 decl = decl->next;
2434 avrule_decl_t *decl;
2442 * If the block is disabled or not having an enabled decl, skip it.
2446 decl = block->enabled;
2447 if (decl == NULL || decl->enabled == 0)
2450 if (hashtab_map(decl->symtab[SYM_ROLES].table,
2558 * in some decl's local symtab(see get_local_role()), we need to