| /linux-6.15/security/selinux/include/ |
| H A D | avc.h | 54 u32 denied; member 67 u32 denied, audited; in avc_audit_required() local 68 denied = requested & ~avd->allowed; in avc_audit_required() 69 if (unlikely(denied)) { in avc_audit_required() 70 audited = denied & avd->auditdeny; in avc_audit_required() 90 audited = denied = requested; in avc_audit_required() 93 *deniedp = denied; in avc_audit_required() 98 u32 denied, int result, struct common_audit_data *a); 123 u32 audited, denied; in avc_audit() local 124 audited = avc_audit_required(requested, avd, result, 0, &denied); in avc_audit() [all …]
|
| /linux-6.15/security/apparmor/ |
| H A D | lib.c | 309 u32 denied = request & (~perms->allow | perms->deny); in aa_check_perms() local 311 if (likely(!denied)) { in aa_check_perms() 322 if (denied & perms->kill) in aa_check_perms() 324 else if (denied == (denied & perms->complain)) in aa_check_perms() 329 if (denied == (denied & perms->hide)) in aa_check_perms() 332 denied &= ~perms->quiet; in aa_check_perms() 333 if (!ad || !denied) in aa_check_perms() 340 ad->denied = denied; in aa_check_perms()
|
| H A D | file.c | 56 if (ad->denied & AA_AUDIT_FILE_MASK) { in file_audit_cb() 58 map_mask_to_chr_mask(ad->denied)); in file_audit_cb() 143 ad.denied = ad.request & ~perms->allow; in aa_audit_file() 474 u32 request, u32 denied, bool in_atomic) in __file_path_perm() argument 502 if (denied && !error) { in __file_path_perm() 535 u32 request, u32 denied) in __file_sock_perm() argument 548 if (denied) { in __file_sock_perm() 577 u32 denied; in aa_file_perm() local 596 denied = request & ~fctx->allow; in aa_file_perm() 609 request, denied, in_atomic); in aa_file_perm() [all …]
|
| H A D | ipc.c | 60 if (ad->denied & AA_SIGNAL_PERM_MASK) { in audit_signal_cb() 62 audit_signal_mask(ad->denied)); in audit_signal_cb()
|
| H A D | task.c | 214 if (ad->denied & AA_PTRACE_PERM_MASK) { in audit_ptrace_cb() 216 audit_ptrace_mask(ad->denied)); in audit_ptrace_cb() 312 if (ad->denied & AA_USERNS_CREATE) in audit_ns_cb()
|
| H A D | net.c | 95 if (ad->denied & NET_PERMS_MASK) { in audit_net_cb() 97 aa_audit_perm_mask(ab, ad->denied, NULL, 0, in audit_net_cb()
|
| H A D | capability.c | 129 !cap_raised(rules->caps.denied, cap)) in profile_capable()
|
| /linux-6.15/include/trace/events/ |
| H A D | avc.h | 26 __field(u32, denied) 36 __entry->denied = sad->denied; 45 __entry->requested, __entry->denied, __entry->audited, __entry->result,
|
| /linux-6.15/security/selinux/ |
| H A D | avc.c | 390 u32 denied, audited; in avc_xperms_audit_required() local 409 *deniedp = denied; in avc_xperms_audit_required() 419 u32 audited, denied; in avc_xperms_audit() local 720 if (sad->denied) in avc_audit_post_callback() 774 sad.denied = denied; in slow_avc_audit() 1025 u32 denied; in avc_has_extended_perms() local 1084 if (unlikely(denied)) in avc_has_extended_perms() 1114 u32 denied; in avc_perm_nonode() local 1119 if (unlikely(denied)) in avc_perm_nonode() 1150 u32 denied; in avc_has_perm_noaudit() local [all …]
|
| /linux-6.15/Documentation/ABI/stable/ |
| H A D | sysfs-hypervisor-xen | 7 Might return "<denied>" in case of special security settings 16 Might return "<denied>" in case of special security settings 25 Might return "<denied>" in case of special security settings 56 Might return "<denied>" in case of special security settings 105 Might return "<denied>" in case of special security settings
|
| /linux-6.15/Documentation/admin-guide/cgroup-v1/ |
| H A D | devices.rst | 19 never receive a device access which is denied by its parent. 77 If a device is denied in group A:: 84 group whitelist entries denied devices 97 group whitelist entries denied devices 107 group whitelist entries denied devices
|
| /linux-6.15/Documentation/admin-guide/LSM/ |
| H A D | landlock.rst | 29 This record type identifies a denied access request to a kernel resource. 65 the ``denials`` field indicates the total number of denied access request, 80 init process, which is denied because of the signal scoping restriction 88 (``type=LANDLOCK_ACCESS``) shows an access denied by the domain `1a6fdc66f`. 109 the number of requests this domain denied (``denials=1``), whether they were
|
| /linux-6.15/security/apparmor/include/ |
| H A D | capability.h | 31 kernel_cap_t denied; member
|
| H A D | audit.h | 121 u32 denied; member
|
| /linux-6.15/Documentation/ABI/testing/ |
| H A D | sysfs-class-power-wilco | 26 be denied by Wilco EC when Long Life mode is enabled.
|
| H A D | sysfs-hypervisor-xen | 45 Might return "<denied>" in case of special security settings
|
| /linux-6.15/Documentation/userspace-api/gpio/ |
| H A D | error-codes.rst | 55 - Permission denied. Typically returned in response to an attempt
|
| /linux-6.15/Documentation/devicetree/bindings/interconnect/ |
| H A D | fsl,imx8m-noc.yaml | 17 ("Global Programmers View") but not all. Access to this area might be denied
|
| /linux-6.15/Documentation/admin-guide/ |
| H A D | mono.rst | 69 If this fails with a permission denied error, check
|
| /linux-6.15/Documentation/userspace-api/media/ |
| H A D | gen-errors.rst | 72 - Permission denied. Can be returned if the device needs write
|
| /linux-6.15/drivers/isdn/mISDN/ |
| H A D | tei.c | 856 goto denied; in new_tei_req() 858 goto denied; in new_tei_req() 865 goto denied; in new_tei_req() 869 goto denied; in new_tei_req() 873 denied: in new_tei_req()
|
| /linux-6.15/tools/perf/Documentation/ |
| H A D | security.txt | 156 output would contain AVC denied records related to perf_event: 163 …audit[1318098]: AVC avc: denied { open } for pid=1318098 comm="perf" scontext=unconfined_u:unco…
|
| /linux-6.15/Documentation/userspace-api/ |
| H A D | landlock.rst | 54 actions and other TCP actions will be denied. 59 to be explicit about the denied-by-default access rights. 147 denied by the ruleset. To add ``/usr`` to the ruleset, we open it with the 480 However, :manpage:`chroot(2)` calls are not denied. 558 File truncation could not be denied before the third Landlock ABI, so it is 575 IOCTL operations could not be denied before the fifth Landlock ABI, so
|
| /linux-6.15/Documentation/userspace-api/ioctl/ |
| H A D | hdio.rst | 441 - EACCES Access denied: requires CAP_SYS_RAWIO 510 - EACCES Access denied: requires CAP_SYS_RAWIO 545 - EACCES Access denied: requires CAP_SYS_ADMIN
|
| /linux-6.15/Documentation/security/ |
| H A D | SCTP.rst | 217 to determine whether the association should be allowed or denied. 310 the association should be allowed or denied.
|