Lines Matching refs:decl
114 * to the object class. This means that the requirements for the decl are the union of the permissions
243 * not met, but we cannot because the decl might be optional (in which
1607 /* copy the scoping information for this avrule decl block */
1711 avrule_decl_t *decl, *last_decl = NULL;
1722 for (decl = block->branch_list; decl != NULL; decl = decl->next) {
1750 module->avdecl_map[decl->decl_id] = new_decl->decl_id;
1752 ret = copy_avrule_decl(state, module, decl, new_decl);
1807 * list with the new decl ids */
1925 avrule_decl_t * decl,
1945 bitmap = &decl->required.scope[i];
1964 for (i = 0; i < decl->required.class_perms_len; i++) {
1966 bitmap = decl->required.class_perms_map + i;
2129 * 2a) If the decl is non-optional, return immediately with an error.
2130 * 2b) If the decl is optional, disable the block and mark changed = 1
2133 * decl. If the block has an else decl, enable.
2142 avrule_decl_t *decl;
2154 for (decl = block->branch_list->next; decl != NULL;
2155 decl = decl->next)
2156 decl->enabled = 0;
2166 decl = block->branch_list;
2168 char *mod_name = decl->module_name ?
2169 decl->module_name : "BASE";
2170 INFO(state->handle, "check module %s decl %d\n",
2171 mod_name, decl->decl_id);
2173 rc = is_decl_requires_met(state, decl, &req);
2178 decl->enabled = 0;
2195 * If the block is disabled and has an else decl, enable that.
2224 avrule_decl_t *decl;
2225 for (decl = block->branch_list; decl != NULL; decl = decl->next) {
2226 cond_list_t *cond = decl->cond_list;
2270 avrule_decl_t *decl;
2271 for (decl = cur->branch_list; decl != NULL; decl = decl->next) {
2272 if (decl->decl_id > num_decls) {
2273 num_decls = decl->decl_id;
2303 avrule_decl_t *decl;
2304 for (decl = cur->branch_list; decl != NULL; decl = decl->next) {
2305 if (decl->decl_id > state->next_decl_id) {
2306 state->next_decl_id = decl->decl_id;
2324 /* This allocates the decl block to module mapping used for error reporting */
2333 avrule_decl_t *decl = cur->branch_list;
2334 while (decl != NULL) {
2335 state->base->decl_val_to_struct[decl->decl_id - 1] =
2336 decl;
2337 state->decl_to_mod[decl->decl_id] = state->base;
2338 decl = decl->next;
2444 avrule_decl_t *decl;
2452 * If the block is disabled or not having an enabled decl, skip it.
2456 decl = block->enabled;
2457 if (decldecl->enabled == 0)
2460 if (hashtab_map(decl->symtab[SYM_ROLES].table,
2592 * in some decl's local symtab(see get_local_role()), we need to
