Home
last modified time | relevance | path

Searched refs:unconfined (Results 1 – 10 of 10) sorted by relevance

/linux-3.4.99/security/apparmor/
Dpolicy.c291 ns->unconfined = aa_alloc_profile("unconfined"); in alloc_namespace()
292 if (!ns->unconfined) in alloc_namespace()
295 ns->unconfined->sid = aa_alloc_sid(); in alloc_namespace()
296 ns->unconfined->flags = PFLAG_UNCONFINED | PFLAG_IX_ON_NAME_ERROR | in alloc_namespace()
304 ns->unconfined->ns = aa_get_namespace(ns); in alloc_namespace()
330 if (ns->unconfined && ns->unconfined->ns == ns) in free_namespace()
331 ns->unconfined->ns = NULL; in free_namespace()
333 aa_put_profile(ns->unconfined); in free_namespace()
528 profile->replacedby = aa_get_profile(profile->ns->unconfined); in __remove_profile()
574 struct aa_profile *unconfined = ns->unconfined; in __remove_namespace() local
[all …]
Ddomain.c78 if (!tracer || unconfined(tracerp)) in may_change_ptraced_domain()
110 if (unconfined(profile)) { in change_profile_perms()
388 if (unconfined(profile)) { in apparmor_bprm_set_creds()
436 new_profile = aa_get_profile(ns->unconfined); in apparmor_bprm_set_creds()
549 (unconfined(new_cxt->profile))) in apparmor_bprm_committing_creds()
618 if (unconfined(profile)) { in aa_change_hat()
769 if (unconfined(profile)) in aa_change_profile()
770 hname = ns->unconfined->base.hname; in aa_change_profile()
Dipc.c72 if (unconfined(tracer) || tracer == tracee) in aa_may_ptrace()
104 if (!unconfined(tracer_p)) { in aa_ptrace()
Dlsm.c130 if (!unconfined(profile) && !COMPLAIN_MODE(profile)) { in apparmor_capget()
147 if (!unconfined(profile)) in apparmor_capable()
169 if (!unconfined(profile)) in common_perm()
312 if (!unconfined(profile)) in apparmor_path_link()
327 if (!unconfined(profile)) { in apparmor_path_rename()
396 if (!unconfined(profile)) { in apparmor_dentry_open()
447 if (!unconfined(profile) && !unconfined(fprofile) && in common_file_perm()
619 if (!unconfined(profile)) in apparmor_task_setrlimit()
895 cxt->profile = aa_get_profile(root_ns->unconfined); in set_init_cxt()
Dprocattr.c57 if (!unconfined(profile)) in aa_getprocattr()
71 if (unconfined(profile)) in aa_getprocattr()
Daudit.c202 if (!unconfined(profile)) in aa_audit()
Dcontext.c91 if (unconfined(profile) || (cxt->profile->ns != profile->ns)) { in aa_replace_current_profile()
/linux-3.4.99/security/apparmor/include/
Dpolicy.h128 struct aa_profile *unconfined; member
262 #define unconfined(X) ((X)->flags & PFLAG_UNCONFINED) macro
Dcontext.h95 if (unconfined(aa_newest_version(cxt->profile))) in __aa_task_is_confined()
/linux-3.4.99/Documentation/security/
Dapparmor.txt6 them run in an unconfined state which is equivalent to standard Linux DAC