Lines Matching defs:role
82 "common", "class", "role", "type/attribute", "user",
221 ERR(state->handle, "Found conflicting default role definitions");
351 role_datum_t *role, *base_role, *new_role = NULL;
354 role = (role_datum_t *) datum;
358 /* role already exists. check that it is what this
360 * modules both declare role foo_r) is checked during
362 if (role->flavor == ROLE_ATTRIB
365 "%s: Expected %s to be a role attribute, but it was already declared as a regular role.",
368 } else if (role->flavor != ROLE_ATTRIB
371 "%s: Expected %s to be a regular role, but it was already declared as a role attribute.",
377 INFO(state->handle, "copying role %s", id);
391 new_role->flavor = role->flavor;
422 state->cur->map[SYM_ROLES][role->s.value - 1] = base_role->s.value;
793 role_datum_t *role = (role_datum_t *) datum;
797 if (!role->bounds)
800 bounds_val = state->cur->map[SYM_ROLES][role->bounds - 1];
805 "Role lookup failed for %s", (char *)key);
1097 role_datum_t *role, *dest_role = NULL;
1104 role = (role_datum_t *) datum;
1114 INFO(state->handle, "fixing role %s", id);
1118 ebitmap_for_each_bit(&role->dominates, rnode, i) {
1130 if (type_set_or_convert(&role->types, &dest_role->types, mod, state)) {
1135 if (role->flavor == ROLE_ATTRIB) {
1137 ebitmap_for_each_bit(&role->roles, rnode, i) {
2421 role_datum_t *role, *sub_attr;
2427 role = (role_datum_t *)datum;
2431 /* object_r is never a role attribute by far */
2435 if (role->flavor != ROLE_ATTRIB)
2439 INFO(state->handle, "expanding role attribute %s", id);
2442 role->roles, rnode, i) {
2448 /* remove the sub role attribute from the parent
2449 * role attribute's roles ebitmap */
2450 if (ebitmap_set_bit(&role->roles, i, 0))
2453 /* loop dependency of role attributes */
2454 if (sub_attr->s.value == role->s.value)
2457 /* now go on to expand a sub role attribute
2459 if (ebitmap_union(&role->roles, &sub_attr->roles)) {
2464 /* sub_attr->roles may contain other role attributes,
2465 * re-scan the parent role attribute's roles ebitmap */
2473 /* For any role attribute in a declaration's local symtab[SYM_ROLES] table,
2487 /* object_r is never a role attribute by far */
2512 INFO(state->handle, "Populating role-attribute relationship "
2659 /* Now that all role attribute's roles ebitmap have been settled,
2660 * escalate sub role attribute's roles ebitmap into that of parent.
2662 * First, since some role-attribute relationships could be recorded
