security/selinux/avc.c

560  * (@ssid, @tsid), interpreting the permissions
611  * @xp_node: resulting extended permissions
858 	 * then we must not add permissions to a cache entry  in avc_update_node()
861 	 * will find the permissions already granted in the cache entry  in avc_update_node()
977  * avc_ss_reset - Flush the cache and revalidate migrated permissions.
1042  * The avc extended permissions logic adds an additional 256 bits of
1043  * permissions to an avc node when extended permissions for that node are
1044  * specified in the avtab. If the additional 256 permissions is not adequate,
1077 	/* if extended permissions are not defined, only consider av_decision */  in avc_has_extended_perms()
1126  * avc_has_perm_noaudit - Check permissions but perform no auditing.
1130  * @requested: requested permissions, interpreted based on @tclass
1134  * Check the AVC to determine whether the @requested permissions are granted
1135  * for the SID pair (@ssid, @tsid), interpreting the permissions
1138  * in @avd.  Return %0 if all @requested permissions are granted,
1139  * -%EACCES if any permissions are denied, or another -errno upon
1177  * avc_has_perm - Check permissions and perform any appropriate auditing.
1181  * @requested: requested permissions, interpreted based on @tclass
1184  * Check the AVC to determine whether the @requested permissions are granted
1185  * for the SID pair (@ssid, @tsid), interpreting the permissions
1188  * permissions in accordance with the policy.  Return %0 if all @requested
1189  * permissions are granted, -%EACCES if any permissions are denied, or