Lines Matching refs:constraint
290 constraint_node_t *constraint,
298 for (e = constraint->expr; e; e = e->next) {
351 sepol_av_to_string(policydb, tclass, constraint->permissions));
361 * constraint as before but adds the information to text buffers that
364 * the final readable constraint.
366 * Return the boolean value of a constraint expression
376 * This function will also build a buffer as the constraint is processed
384 constraint_node_t *constraint,
415 class_buf = get_class_info(tclass, constraint, xcontext);
425 for (e = constraint->expr; e; e = e->next) {
460 /* Now process each expression of the constraint */
670 * At this point each expression of the constraint is in
703 /* Convert constraint from RPN to infix notation. */
750 /* Get the final answer from tos and build constraint text */
753 /* Constraint calculation: rc = 0 is denied, rc = 1 is granted */
754 sprintf(tmp_buf, "Constraint %s\n", s[0] ? "GRANTED" : "DENIED");
759 * These contain the constraint components that are added to the
826 constraint_node_t *constraint;
893 * Remove any permissions prohibited by a constraint (this includes
896 constraint = tclass_datum->constraints;
897 while (constraint) {
898 if ((constraint->permissions & (avd->allowed)) &&
900 tclass, constraint, r_buf, flags)) {
902 (avd->allowed) & ~(constraint->permissions);
904 constraint = constraint->next;
947 constraint_node_t *constraint;
973 constraint = tclass_datum->validatetrans;
974 while (constraint) {
976 0, constraint, NULL, 0)) {
979 constraint = constraint->next;
1048 * chunks (as it gets called for each constraint processed).
