linux/security/device_cgroup.c

183  * devcgroup_online - initializes devcgroup's behavior and exceptions based on
283 	struct dev_cgroup *devcgroup = css_to_devcgroup(seq_css(m));
294 	if (devcgroup->behavior == DEVCG_DEFAULT_ALLOW) {
301 		list_for_each_entry_rcu(ex, &devcgroup->exceptions, list) {
610 static int devcgroup_update_access(struct dev_cgroup *devcgroup,
617 	struct dev_cgroup *parent = css_to_devcgroup(devcgroup->css.parent);
631 			if (css_has_online_children(&devcgroup->css))
637 				devcgroup->behavior = DEVCG_DEFAULT_ALLOW;
638 				dev_exception_clean(devcgroup);
644 						 &devcgroup->exceptions);
647 			dev_exception_clean(devcgroup);
648 			rc = dev_exceptions_copy(&devcgroup->exceptions,
651 				dev_exceptions_move(&devcgroup->exceptions,
655 			devcgroup->behavior = DEVCG_DEFAULT_ALLOW;
659 			if (css_has_online_children(&devcgroup->css))
662 			dev_exception_clean(devcgroup);
663 			devcgroup->behavior = DEVCG_DEFAULT_DENY;
750 		if (devcgroup->behavior == DEVCG_DEFAULT_ALLOW) {
752 			if (!parent_allows_removal(devcgroup, &ex))
754 			dev_exception_rm(devcgroup, &ex);
758 		if (!parent_has_perm(devcgroup, &ex))
760 		rc = dev_exception_add(devcgroup, &ex);
768 		if (devcgroup->behavior == DEVCG_DEFAULT_DENY)
769 			dev_exception_rm(devcgroup, &ex);
771 			rc = dev_exception_add(devcgroup, &ex);
776 		rc = propagate_exception(devcgroup, &ex);