Lines Matching full:profile
57 * @profile: profile being tested for confinement (NOT NULL)
66 static int audit_caps(struct apparmor_audit_data *ad, struct aa_profile *profile, in audit_caps() argument
71 struct aa_ruleset *rules = list_first_entry(&profile->rules, in audit_caps()
80 if (likely((AUDIT_MODE(profile) != AUDIT_ALL) && in audit_caps()
84 } else if (KILL_MODE(profile) || in audit_caps()
88 AUDIT_MODE(profile) != AUDIT_NOQUIET && in audit_caps()
89 AUDIT_MODE(profile) != AUDIT_ALL) { in audit_caps()
99 if (COMPLAIN_MODE(profile)) in audit_caps()
109 return aa_audit(type, profile, ad, audit_cb); in audit_caps()
113 * profile_capable - test if profile allows use of capability @cap
114 * @profile: profile being enforced (NOT NULL, NOT unconfined)
121 static int profile_capable(struct aa_profile *profile, int cap, in profile_capable() argument
124 struct aa_ruleset *rules = list_first_entry(&profile->rules, in profile_capable()
135 if (!COMPLAIN_MODE(profile)) in profile_capable()
143 return audit_caps(ad, profile, cap, error); in profile_capable()
153 * Look up capability in profile capability set.
160 struct aa_profile *profile; in aa_capable() local
166 error = fn_for_each_confined(label, profile, in aa_capable()
167 profile_capable(profile, cap, opts, &ad)); in aa_capable()