Lines Matching full:profile
99 * aa_mangle_name - mangle a profile name to std profile layout form
100 * @name: profile name to mangle (NOT NULL)
608 static void profile_query_cb(struct aa_profile *profile, struct aa_perms *perms, in profile_query_cb() argument
615 if (profile_unconfined(profile)) in profile_query_cb()
617 if (profile->file.dfa && *match_str == AA_CLASS_FILE) { in profile_query_cb()
618 dfa = profile->file.dfa; in profile_query_cb()
619 state = aa_dfa_match_len(dfa, profile->file.start, in profile_query_cb()
626 } else if (profile->policy.dfa) { in profile_query_cb()
627 if (!PROFILE_MEDIATES(profile, *match_str)) in profile_query_cb()
629 dfa = profile->policy.dfa; in profile_query_cb()
630 state = aa_dfa_match_len(dfa, profile->policy.start[0], in profile_query_cb()
635 aa_apply_modes_to_perms(profile, &tmp); in profile_query_cb()
665 struct aa_profile *profile; in query_data() local
700 label_for_each_confined(i, label, profile) { in query_data()
701 if (!profile->data) in query_data()
704 data = rhashtable_lookup_fast(profile->data, &key, in query_data()
705 profile->data->p); in query_data()
754 struct aa_profile *profile; in query_label() local
771 * profile name and dfa string. profile_name_len is greater in query_label()
786 label_for_each_in_ns(i, labels_ns(label), label, profile) { in query_label()
787 profile_query_cb(profile, &perms, match_str, match_len); in query_label()
790 label_for_each(i, label, profile) { in query_label()
791 profile_query_cb(profile, &perms, match_str, match_len); in query_label()
903 #define QUERY_CMD_PROFILE "profile\0"
922 * profile query specific format described in the query_label() function
1024 * profile based file operations
1068 struct aa_profile *profile = labels_profile(label); in seq_profile_name_show() local
1069 seq_printf(seq, "%s\n", profile->base.name); in seq_profile_name_show()
1079 struct aa_profile *profile = labels_profile(label); in seq_profile_mode_show() local
1080 seq_printf(seq, "%s\n", aa_profile_mode_names[profile->mode]); in seq_profile_mode_show()
1090 struct aa_profile *profile = labels_profile(label); in seq_profile_attach_show() local
1091 if (profile->attach) in seq_profile_attach_show()
1092 seq_printf(seq, "%s\n", profile->attach); in seq_profile_attach_show()
1093 else if (profile->xmatch) in seq_profile_attach_show()
1096 seq_printf(seq, "%s\n", profile->base.name); in seq_profile_attach_show()
1106 struct aa_profile *profile = labels_profile(label); in seq_profile_hash_show() local
1109 if (profile->hash) { in seq_profile_hash_show()
1111 seq_printf(seq, "%.2x", profile->hash[i]); in seq_profile_hash_show()
1158 struct aa_profile *profile; in seq_ns_nsstacked_show() local
1165 label_for_each(it, label, profile) in seq_ns_nsstacked_show()
1166 if (profile->ns != labels_ns(label)) { in seq_ns_nsstacked_show()
1497 /** fns to setup dynamic per profile/namespace files **/
1501 * Requires: @profile->ns->lock held
1503 void __aafs_profile_rmdir(struct aa_profile *profile) in __aafs_profile_rmdir() argument
1508 if (!profile) in __aafs_profile_rmdir()
1511 list_for_each_entry(child, &profile->base.profiles, base.list) in __aafs_profile_rmdir()
1516 if (!profile->dents[i]) in __aafs_profile_rmdir()
1519 proxy = d_inode(profile->dents[i])->i_private; in __aafs_profile_rmdir()
1520 aafs_remove(profile->dents[i]); in __aafs_profile_rmdir()
1522 profile->dents[i] = NULL; in __aafs_profile_rmdir()
1548 struct aa_profile *profile, in create_profile_file() argument
1551 struct aa_proxy *proxy = aa_get_proxy(profile->label.proxy); in create_profile_file()
1561 static int profile_depth(struct aa_profile *profile) in profile_depth() argument
1566 for (depth = 0; profile; profile = rcu_access_pointer(profile->parent)) in profile_depth()
1610 struct aa_profile *profile; in rawdata_get_link_base() local
1618 profile = labels_profile(label); in rawdata_get_link_base()
1619 depth = profile_depth(profile); in rawdata_get_link_base()
1620 target = gen_symlink_name(depth, profile->rawdata->name, name); in rawdata_get_link_base()
1665 * Requires: @profile->ns->lock held
1667 int __aafs_profile_mkdir(struct aa_profile *profile, struct dentry *parent) in __aafs_profile_mkdir() argument
1673 AA_BUG(!profile); in __aafs_profile_mkdir()
1674 AA_BUG(!mutex_is_locked(&profiles_ns(profile)->lock)); in __aafs_profile_mkdir()
1678 p = aa_deref_parent(profile); in __aafs_profile_mkdir()
1687 if (!profile->dirname) { in __aafs_profile_mkdir()
1689 len = mangle_name(profile->base.name, NULL); in __aafs_profile_mkdir()
1690 id_len = snprintf(NULL, 0, ".%ld", profile->ns->uniq_id); in __aafs_profile_mkdir()
1692 profile->dirname = kmalloc(len + id_len + 1, GFP_KERNEL); in __aafs_profile_mkdir()
1693 if (!profile->dirname) { in __aafs_profile_mkdir()
1698 mangle_name(profile->base.name, profile->dirname); in __aafs_profile_mkdir()
1699 sprintf(profile->dirname + len, ".%ld", profile->ns->uniq_id++); in __aafs_profile_mkdir()
1702 dent = aafs_create_dir(profile->dirname, parent); in __aafs_profile_mkdir()
1705 prof_dir(profile) = dir = dent; in __aafs_profile_mkdir()
1707 dent = create_profile_file(dir, "name", profile, in __aafs_profile_mkdir()
1711 profile->dents[AAFS_PROF_NAME] = dent; in __aafs_profile_mkdir()
1713 dent = create_profile_file(dir, "mode", profile, in __aafs_profile_mkdir()
1717 profile->dents[AAFS_PROF_MODE] = dent; in __aafs_profile_mkdir()
1719 dent = create_profile_file(dir, "attach", profile, in __aafs_profile_mkdir()
1723 profile->dents[AAFS_PROF_ATTACH] = dent; in __aafs_profile_mkdir()
1725 if (profile->hash) { in __aafs_profile_mkdir()
1726 dent = create_profile_file(dir, "sha1", profile, in __aafs_profile_mkdir()
1730 profile->dents[AAFS_PROF_HASH] = dent; in __aafs_profile_mkdir()
1733 if (profile->rawdata) { in __aafs_profile_mkdir()
1735 profile->label.proxy, NULL, NULL, in __aafs_profile_mkdir()
1739 aa_get_proxy(profile->label.proxy); in __aafs_profile_mkdir()
1740 profile->dents[AAFS_PROF_RAW_HASH] = dent; in __aafs_profile_mkdir()
1743 profile->label.proxy, NULL, NULL, in __aafs_profile_mkdir()
1747 aa_get_proxy(profile->label.proxy); in __aafs_profile_mkdir()
1748 profile->dents[AAFS_PROF_RAW_ABI] = dent; in __aafs_profile_mkdir()
1751 profile->label.proxy, NULL, NULL, in __aafs_profile_mkdir()
1755 aa_get_proxy(profile->label.proxy); in __aafs_profile_mkdir()
1756 profile->dents[AAFS_PROF_RAW_DATA] = dent; in __aafs_profile_mkdir()
1759 list_for_each_entry(child, &profile->base.profiles, base.list) { in __aafs_profile_mkdir()
1760 error = __aafs_profile_mkdir(child, prof_child_dir(profile)); in __aafs_profile_mkdir()
1771 __aafs_profile_rmdir(profile); in __aafs_profile_mkdir()
2096 * __first_profile - find the first profile in a namespace
2100 * Returns: unrefcounted profile or NULL if no profile
2101 * Requires: profile->ns.lock to be held
2118 * __next_profile - step to the next profile in a profile tree
2119 * @profile: current profile in tree (NOT NULL)
2121 * Perform a depth first traversal on the profile tree in a namespace
2123 * Returns: next profile or NULL if done
2124 * Requires: profile->ns.lock to be held
2133 /* is next profile a child */ in __next_profile()
2138 /* is next profile a sibling, parent sibling, gp, sibling, .. */ in __next_profile()
2150 /* is next another profile in the namespace */ in __next_profile()
2159 * next_profile - step to the next profile in where ever it may be
2161 * @profile: current profile (NOT NULL)
2163 * Returns: next profile or NULL if there isn't one
2166 struct aa_profile *profile) in next_profile() argument
2168 struct aa_profile *next = __next_profile(profile); in next_profile()
2173 return __first_profile(root, __next_ns(root, profile->ns)); in next_profile()
2177 * p_start - start a depth first traversal of profile tree
2181 * Returns: first profile under current namespace or NULL if none found
2187 struct aa_profile *profile = NULL; in p_start() local
2192 /* find the first profile */ in p_start()
2194 profile = __first_profile(root, root); in p_start()
2197 for (; profile && l > 0; l--) in p_start()
2198 profile = next_profile(root, profile); in p_start()
2200 return profile; in p_start()
2204 * p_next - read the next profile entry
2206 * @p: profile previously returned
2209 * Returns: next profile after @p or NULL if none
2215 struct aa_profile *profile = p; in p_next() local
2219 return next_profile(ns, profile); in p_next()
2225 * @p: the last profile writen
2231 struct aa_profile *profile = p; in p_stop() local
2234 if (profile) { in p_stop()
2235 for (ns = profile->ns; ns && ns != root; ns = ns->parent) in p_stop()
2243 * seq_show_profile - show a profile entry
2245 * @p: current position (profile) (NOT NULL)
2251 struct aa_profile *profile = (struct aa_profile *)p; in seq_show_profile() local
2254 aa_label_seq_xprint(f, root, &profile->label, in seq_show_profile()
2346 AA_SFS_FILE_BOOLEAN("profile", 1),
2656 /* TODO: add default profile to apparmorfs */ in aa_create_aafs()