| /linux-6.15/security/landlock/ |
| H A D | task.c | 275 if (!subject) in hook_unix_stream_connect()
281 if (!sock_is_scoped(other, subject->domain)) in hook_unix_stream_connect()
305 if (!subject) in hook_unix_may_send()
318 if (!sock_is_scoped(other->sk, subject->domain)) in hook_unix_may_send()
344 const struct landlock_cred_security *subject; in hook_task_kill() local
366 if (!subject) in hook_task_kill()
371 is_scoped = domain_is_scoped(subject->domain, in hook_task_kill()
393 const struct landlock_cred_security *subject; in hook_file_send_sigiotask() local
398 subject = &landlock_file(fown->file)->fown_subject; in hook_file_send_sigiotask()
407 if (!subject->domain) in hook_file_send_sigiotask()
[all …]
|
| H A D | fs.c | 962 if (!subject) in current_check_access_path()
973 landlock_log_denial(subject, &request); in current_check_access_path()
1144 if (!subject) in current_check_refer_path()
1171 subject->domain, in current_check_refer_path()
1430 if (!subject) in hook_sb_mount()
1445 if (!subject) in hook_move_mount()
1463 if (!subject) in hook_sb_umount()
1477 if (!subject) in hook_sb_remount()
1500 if (!subject) in hook_sb_pivotroot()
1624 if (!subject) in hook_file_open()
[all …]
|
| H A D | net.c | 58 const struct landlock_cred_security *const subject = in current_check_access_socket() local
62 if (!subject) in current_check_access_socket()
177 rule = landlock_find_rule(subject->domain, id); in current_check_access_socket()
178 access_request = landlock_init_layer_masks(subject->domain, in current_check_access_socket()
186 landlock_log_denial(subject, in current_check_access_socket()
|
| H A D | audit.c | 390 void landlock_log_denial(const struct landlock_cred_security *const subject, in landlock_log_denial() argument
398 if (WARN_ON_ONCE(!subject || !subject->domain || in landlock_log_denial()
399 !subject->domain->hierarchy || !request)) in landlock_log_denial()
410 subject->domain, &missing, request->layer_masks, in landlock_log_denial()
418 get_hierarchy(subject->domain, youngest_layer); in landlock_log_denial()
422 get_hierarchy(subject->domain, youngest_layer); in landlock_log_denial()
440 if (subject->domain_exec & BIT(youngest_layer)) { in landlock_log_denial()
|
| H A D | audit.h | 58 void landlock_log_denial(const struct landlock_cred_security *const subject,
69 landlock_log_denial(const struct landlock_cred_security *const subject, in landlock_log_denial() argument
|
| /linux-6.15/security/smack/ |
| H A D | smack_access.c | 117 int smk_access(struct smack_known *subject, struct smack_known *object, in smk_access() argument
129 if (subject == &smack_known_star) { in smk_access()
138 if (object == &smack_known_web || subject == &smack_known_web) in smk_access()
149 if (subject->smk_known == object->smk_known) in smk_access()
159 if (subject == &smack_known_hat) in smk_access()
170 may = smk_access_entry(subject->smk_known, object->smk_known, in smk_access()
171 &subject->smk_rules); in smk_access()
194 if (subject == smack_unconfined) in smk_access()
201 smack_log(subject->smk_known, object->smk_known, in smk_access()
327 audit_log_untrustedstring(ab, sad->subject); in smack_log_callback()
[all …]
|
| /linux-6.15/crypto/asymmetric_keys/ |
| H A D | x509_public_key.c | 162 pr_devel("Cert Subject: %s\n", cert->subject); in x509_key_preparse()
181 sulen = strlen(cert->subject); in x509_key_preparse()
193 p = memcpy(desc, cert->subject, sulen); in x509_key_preparse()
|
| H A D | x509_parser.h | 19 char *subject; /* Name of certificate subject */ member
|
| H A D | x509.asn1 | 20 subject Name ({ x509_note_subject }),
|
| H A D | pkcs7_verify.c | 208 x509->subject, in pkcs7_verify_sig_chain()
285 pr_debug("- subject %s\n", p->subject); in pkcs7_verify_sig_chain()
|
| /linux-6.15/Documentation/admin-guide/LSM/ |
| H A D | Smack.rst | 134 This interface reports whether a subject with the specified
142 This interface reports whether a subject with the specified
305 revoke-subject
307 rules with that subject label.
334 kind of access permitted a subject with subjectlabel on an
399 A subject is an active entity on the computer system.
408 Any attempt by a subject to put information into or get
413 characteristics of a subject or an object.
436 each of the subject and the object.
471 A signal is a write operation from the subject task to
[all …]
|
| /linux-6.15/ |
| H A D | COPYING | 20 All contributions to the Linux Kernel are subject to this COPYING file.
|
| /linux-6.15/Documentation/networking/ |
| H A D | ax25.rst | 15 of the message, the subject field is ignored. You don't need to be
|
| /linux-6.15/Documentation/security/ |
| H A D | credentials.rst | 52 A subject is an object that is acting upon another object.
65 A subject has an additional interpretation of its credentials. A subset
68 subject acts.
77 Linux has a number of actions available that a subject may perform upon an
78 object. The set of actions available depends on the nature of the subject
86 When a subject acts upon an object, a security calculation is made. This
88 action, and searching one or more sets of rules to see whether the subject
101 is an abbreviated ACL with three fixed classes of subject ('user',
118 subject label, the object label and the action and look for a rule
|
| /linux-6.15/LICENSES/deprecated/ |
| H A D | Zlib | 19 commercial applications, and to alter it and redistribute it freely, subject
|
| /linux-6.15/arch/arm/boot/dts/arm/ |
| H A D | arm-realview-eb-bbrevd.dts | 9 * furnished to do so, subject to the following conditions:
|
| H A D | arm-realview-eb-11mp-bbrevd.dts | 9 * furnished to do so, subject to the following conditions:
|
| H A D | arm-realview-eb-a9mp-bbrevd.dts | 9 * furnished to do so, subject to the following conditions:
|
| H A D | arm-realview-eb-11mp-bbrevd-ctrevb.dts | 9 * furnished to do so, subject to the following conditions:
|
| /linux-6.15/Documentation/devicetree/bindings/ |
| H A D | submitting-patches.rst | 14 be a separate patch. The preferred subject prefix for binding patches is::
23 The 80 characters of the subject are precious. It is recommended to not
|
| /linux-6.15/Documentation/devicetree/bindings/iommu/ |
| H A D | apple,sart.yaml | 17 transactions of a single device are subject to SART filtering.
|
| /linux-6.15/LICENSES/preferred/ |
| H A D | MIT | 19 Software is furnished to do so, subject to the following conditions:
|
| /linux-6.15/drivers/gpu/drm/nouveau/nvkm/engine/gr/fuc/ |
| H A D | gpcgk104.fuc3 | 9 * Software is furnished to do so, subject to the following conditions:
|
| H A D | gpcgf100.fuc3 | 9 * Software is furnished to do so, subject to the following conditions:
|
| H A D | gpcgf117.fuc3 | 9 * Software is furnished to do so, subject to the following conditions:
|