security/landlock/access.h

3  * Landlock - Access types and helpers
21  * All access rights that are denied by default whether they are handled or not
23  * entries when we need to get the absolute handled access masks, see
39 /* Makes sure all filesystem access rights can be stored. */
41 /* Makes sure all network access rights can be stored. */
48 /* Ruleset access masks. */
65  * struct layer_access_masks - A boolean matrix of layers and access rights
67  * This has a bit for each combination of layer numbers and access rights.
68  * During access checks, it is used to represent the access rights for each
69  * layer which still need to be fulfilled.  When all bits are 0, the access
74 	 * @access: The unfulfilled access rights for each layer.
76 	access_mask_t access[LANDLOCK_MAX_NUM_LAYERS];  member
80  * Tracks domains responsible of a denied access.  This avoids storing in each
81  * object the full matrix of per-layer unfulfilled access rights, which is
85  * certain access right.  For file system access rights, the upper four bits are
92  * Makes sure all optional access rights can be tied to a layer index (cf.
102 /* Upgrades with all initially denied by default access rights. */
107 	 * All access rights that are denied by default whether they are  in landlock_upgrade_handled_access_masks()
116 /* Checks the subset relation between access masks. */