Lines Matching refs:avd
833 struct sepol_av_decision *avd,
842 struct sepol_av_decision *avd, in type_attribute_bounds_av() argument
878 masked = ~lo_avd.allowed & avd->allowed; in type_attribute_bounds_av()
884 avd->allowed &= ~masked; in type_attribute_bounds_av()
897 struct sepol_av_decision *avd, in context_struct_compute_av() argument
920 avd->allowed = 0; in context_struct_compute_av()
921 avd->decided = 0xffffffff; in context_struct_compute_av()
922 avd->auditallow = 0; in context_struct_compute_av()
923 avd->auditdeny = 0xffffffff; in context_struct_compute_av()
924 avd->seqno = latest_granting; in context_struct_compute_av()
950 avd->allowed |= node->datum.data; in context_struct_compute_av()
953 avd->auditallow |= node->datum.data; in context_struct_compute_av()
955 avd->auditdeny &= node->datum.data; in context_struct_compute_av()
959 cond_compute_av(&policydb->te_cond_avtab, &avkey, avd); in context_struct_compute_av()
964 if (requested & ~avd->allowed) { in context_struct_compute_av()
967 requested &= avd->allowed; in context_struct_compute_av()
976 if ((constraint->permissions & (avd->allowed)) && in context_struct_compute_av()
979 avd->allowed = in context_struct_compute_av()
980 (avd->allowed) & ~(constraint->permissions); in context_struct_compute_av()
985 if (requested & ~avd->allowed) { in context_struct_compute_av()
988 requested &= avd->allowed; in context_struct_compute_av()
997 (avd->allowed & (PROCESS__TRANSITION | PROCESS__DYNTRANSITION)) && in context_struct_compute_av()
1005 avd->allowed = (avd->allowed) & ~(PROCESS__TRANSITION | in context_struct_compute_av()
1009 if (requested & ~avd->allowed) { in context_struct_compute_av()
1012 requested &= avd->allowed; in context_struct_compute_av()
1015 type_attribute_bounds_av(scontext, tcontext, tclass, requested, avd, in context_struct_compute_av()
1133 struct sepol_av_decision *avd, in sepol_compute_av_reason() argument
1153 requested, avd, reason, NULL, 0); in sepol_compute_av_reason()
1167 struct sepol_av_decision *avd, in sepol_compute_av_reason_buffer() argument
1200 requested, avd, reason, reason_buf, flags); in sepol_compute_av_reason_buffer()
1209 struct sepol_av_decision *avd) in sepol_compute_av() argument
1212 return sepol_compute_av_reason(ssid, tsid, tclass, requested, avd, in sepol_compute_av()
2171 struct sepol_av_decision avd; in sepol_get_user_sids() local
2216 &avd, &reason, NULL, 0); in sepol_get_user_sids()
2217 if (rc || !(avd.allowed & PROCESS__TRANSITION)) in sepol_get_user_sids()