Lines Matching +full:in +full:- +full:masks
1 /* SPDX-License-Identifier: GPL-2.0-only */
3 * Landlock - Credential hooks
5 * Copyright © 2019-2020 Mickaël Salaün <mic@digikod.net>
6 * Copyright © 2019-2020 ANSSI
7 * Copyright © 2021-2025 Microsoft Corporation
24 * struct landlock_cred_security - Credential security blob
27 * landlock_file_security. However, it is always aligned in the LSM cred blob,
65 return cred->security + landlock_blob_sizes.lbs_cred; in landlock_cred()
70 return landlock_cred(current_cred())->domain; in landlock_get_current_domain()
74 * The call needs to come from an RCU read-side critical section.
79 return landlock_cred(__task_cred(task))->domain; in landlock_get_task_domain()
96 * landlock_get_applicable_subject - Return the subject's Landlock credential
99 * specified in @masks
102 * @masks: access masks
103 * @handle_layer: returned youngest layer handling a subset of @masks. Not set
106 * Returns: landlock_cred(@cred) if any access rights specified in @masks is
111 const struct access_masks masks, in landlock_get_applicable_subject() argument
115 .masks = masks, in landlock_get_applicable_subject()
123 domain = landlock_cred(cred)->domain; in landlock_get_applicable_subject()
127 for (layer_level = domain->num_layers - 1; layer_level >= 0; in landlock_get_applicable_subject()
128 layer_level--) { in landlock_get_applicable_subject()
130 .masks = domain->access_masks[layer_level], in landlock_get_applicable_subject()