Lines Matching defs:subj

85 SELinuxDoCheck(SELinuxSubjectRec * subj, SELinuxObjectRec * obj,
89 if (subj->privileged)
92 auditdata->command = subj->command;
95 if (avc_has_perm(subj->sid, obj->sid, class, mode, &subj->aeref,
115 SELinuxSubjectRec *subj;
119 subj = dixLookupPrivate(&client->devPrivates, subjectKey);
146 strncpy(subj->command, cmdname, COMMAND_LEN - 1);
154 if (avc_context_to_sid_raw(ctx, &subj->sid) < 0)
158 obj->sid = subj->sid;
170 SELinuxSubjectRec *subj;
176 subj = dixLookupPrivate(&serverClient->devPrivates, subjectKey);
178 subj->privileged = 1;
185 if (avc_context_to_sid_raw(ctx, &subj->sid) < 0)
188 obj->sid = subj->sid;
210 SELinuxLabelResource(XaceResourceAccessRec * rec, SELinuxSubjectRec * subj,
217 if (rec->rtype & RC_DRAWABLE && subj->win_create_sid) {
218 obj->sid = subj->win_create_sid;
234 tsid = subj->sid;
238 if (avc_compute_create(subj->sid, tsid, class, &obj->sid) < 0) {
335 SELinuxSubjectRec *subj;
341 subj = dixLookupPrivate(&rec->client->devPrivates, subjectKey);
350 if (subj->dev_create_sid) {
352 obj->sid = subj->dev_create_sid;
353 dsubj->sid = subj->dev_create_sid;
357 obj->sid = subj->sid;
358 dsubj->sid = subj->sid;
363 rc = SELinuxDoCheck(subj, obj, cls, rec->access_mode, &auditdata);
372 SELinuxSubjectRec *subj;
379 subj = dixLookupPrivate(&rec->dev->devPrivates, subjectKey);
381 subj = dixLookupPrivate(&rec->client->devPrivates, subjectKey);
386 rc = SELinuxDoCheck(subj, obj, SECCLASS_X_DRAWABLE, DixSendAccess,
401 rc = SELinuxDoCheck(subj, &ev_sid, class, DixSendAccess, &auditdata);
414 SELinuxSubjectRec *subj;
420 subj = dixLookupPrivate(&rec->client->devPrivates, subjectKey);
424 rc = SELinuxDoCheck(subj, obj, SECCLASS_X_DRAWABLE, DixReceiveAccess,
439 rc = SELinuxDoCheck(subj, &ev_sid, class, DixReceiveAccess, &auditdata);
452 SELinuxSubjectRec *subj, *serv;
457 subj = dixLookupPrivate(&rec->client->devPrivates, subjectKey);
483 rc = SELinuxDoCheck(subj, obj, SECCLASS_X_EXTENSION, rec->access_mode,
493 SELinuxSubjectRec *subj;
502 subj = dixLookupPrivate(&rec->client->devPrivates, subjectKey);
507 rc = SELinuxSelectionToSID(name, subj, &obj->sid, &obj->poly);
514 rc = SELinuxSelectionToSID(name, subj, &tsid, NULL);
534 rc = SELinuxDoCheck(subj, obj, SECCLASS_X_SELECTION, access_mode,
542 if (subj->sel_create_sid)
543 data->sid = subj->sel_create_sid;
553 SELinuxSubjectRec *subj;
565 subj = dixLookupPrivate(&rec->client->devPrivates, subjectKey);
570 rc = SELinuxPropertyToSID(name, subj, &obj->sid, &obj->poly);
578 rc = SELinuxPropertyToSID(name, subj, &tsid, NULL);
598 rc = SELinuxDoCheck(subj, obj, SECCLASS_X_PROPERTY, rec->access_mode,
606 if (subj->prp_create_sid)
607 data->sid = subj->prp_create_sid;
617 SELinuxSubjectRec *subj;
625 subj = dixLookupPrivate(&rec->client->devPrivates, subjectKey);
644 rc = SELinuxLabelResource(rec, subj, obj, class);
660 rc = SELinuxDoCheck(subj, obj, class, access_mode, &auditdata);
666 rc = SELinuxDoCheck(subj, obj, class, DixBlendAccess, &auditdata);
676 SELinuxSubjectRec *subj;
682 subj = dixLookupPrivate(&rec->client->devPrivates, subjectKey);
688 if (avc_compute_create(subj->sid, subj->sid, SECCLASS_X_SCREEN,
699 rc = SELinuxDoCheck(subj, obj, SECCLASS_X_SCREEN, access_mode, &auditdata);
708 SELinuxSubjectRec *subj;
713 subj = dixLookupPrivate(&rec->client->devPrivates, subjectKey);
716 rc = SELinuxDoCheck(subj, obj, SECCLASS_X_CLIENT, rec->access_mode,
726 SELinuxSubjectRec *subj;
731 subj = dixLookupPrivate(&rec->client->devPrivates, subjectKey);
734 rc = SELinuxDoCheck(subj, obj, SECCLASS_X_SERVER, rec->access_mode,
763 SELinuxSubjectRec *subj;
773 subj = dixLookupPrivate(&wClient(pWin)->devPrivates, subjectKey);
775 if (subj->sid) {
777 int rc = avc_sid_to_context_raw(subj->sid, &ctx);