Lines Matching refs:decl
114 * to the object class. This means that the requirements for the decl are the union of the permissions
278 * not met, but we cannot because the decl might be optional (in which
1665 /* copy the scoping information for this avrule decl block */
1769 avrule_decl_t *decl, *last_decl = NULL;
1780 for (decl = block->branch_list; decl != NULL; decl = decl->next) {
1809 module->avdecl_map[decl->decl_id] = new_decl->decl_id;
1811 ret = copy_avrule_decl(state, module, decl, new_decl);
1867 * list with the new decl ids */
1985 avrule_decl_t * decl,
2005 bitmap = &decl->required.scope[i];
2024 for (i = 0; i < decl->required.class_perms_len; i++) {
2026 bitmap = decl->required.class_perms_map + i;
2185 * 2a) If the decl is non-optional, return immediately with an error.
2186 * 2b) If the decl is optional, disable the block and mark changed = 1
2189 * decl. If the block has an else decl, enable.
2198 avrule_decl_t *decl;
2210 for (decl = block->branch_list->next; decl != NULL;
2211 decl = decl->next)
2212 decl->enabled = 0;
2222 decl = block->branch_list;
2224 const char *mod_name = decl->module_name ?
2225 decl->module_name : "BASE";
2226 INFO(state->handle, "check module %s decl %d\n",
2227 mod_name, decl->decl_id);
2229 rc = is_decl_requires_met(state, decl, &req);
2234 decl->enabled = 0;
2251 * If the block is disabled and has an else decl, enable that.
2280 avrule_decl_t *decl;
2281 for (decl = block->branch_list; decl != NULL; decl = decl->next) {
2282 cond_list_t *cond = decl->cond_list;
2326 avrule_decl_t *decl;
2327 for (decl = cur->branch_list; decl != NULL; decl = decl->next) {
2328 if (decl->decl_id > num_decls) {
2329 num_decls = decl->decl_id;
2359 avrule_decl_t *decl;
2360 for (decl = cur->branch_list; decl != NULL; decl = decl->next) {
2361 if (decl->decl_id > state->next_decl_id) {
2362 state->next_decl_id = decl->decl_id;
2380 /* This allocates the decl block to module mapping used for error reporting */
2389 avrule_decl_t *decl = cur->branch_list;
2390 while (decl != NULL) {
2391 state->base->decl_val_to_struct[decl->decl_id - 1] =
2392 decl;
2393 state->decl_to_mod[decl->decl_id] = state->base;
2394 decl = decl->next;
2500 avrule_decl_t *decl;
2508 * If the block is disabled or not having an enabled decl, skip it.
2512 decl = block->enabled;
2513 if (decl == NULL || decl->enabled == 0)
2516 if (hashtab_map(decl->symtab[SYM_ROLES].table,
2648 * in some decl's local symtab(see get_local_role()), we need to
