332 	const struct cred *old;  in SYSCALL_DEFINE2()  local
348 	old = current_cred();  in SYSCALL_DEFINE2()
352 		if (gid_eq(old->gid, krgid) ||  in SYSCALL_DEFINE2()
353 		    gid_eq(old->egid, krgid) ||  in SYSCALL_DEFINE2()
354 		    ns_capable(old->user_ns, CAP_SETGID))  in SYSCALL_DEFINE2()
360 		if (gid_eq(old->gid, kegid) ||  in SYSCALL_DEFINE2()
361 		    gid_eq(old->egid, kegid) ||  in SYSCALL_DEFINE2()
362 		    gid_eq(old->sgid, kegid) ||  in SYSCALL_DEFINE2()
363 		    ns_capable(old->user_ns, CAP_SETGID))  in SYSCALL_DEFINE2()
370 	    (egid != (gid_t) -1 && !gid_eq(kegid, old->gid)))  in SYSCALL_DEFINE2()
389 	const struct cred *old;  in SYSCALL_DEFINE1()  local
401 	old = current_cred();  in SYSCALL_DEFINE1()
404 	if (ns_capable(old->user_ns, CAP_SETGID))  in SYSCALL_DEFINE1()
406 	else if (gid_eq(kgid, old->gid) || gid_eq(kgid, old->sgid))  in SYSCALL_DEFINE1()
465 	const struct cred *old;  in SYSCALL_DEFINE2()  local
481 	old = current_cred();  in SYSCALL_DEFINE2()
486 		if (!uid_eq(old->uid, kruid) &&  in SYSCALL_DEFINE2()
487 		    !uid_eq(old->euid, kruid) &&  in SYSCALL_DEFINE2()
488 		    !ns_capable(old->user_ns, CAP_SETUID))  in SYSCALL_DEFINE2()
494 		if (!uid_eq(old->uid, keuid) &&  in SYSCALL_DEFINE2()
495 		    !uid_eq(old->euid, keuid) &&  in SYSCALL_DEFINE2()
496 		    !uid_eq(old->suid, keuid) &&  in SYSCALL_DEFINE2()
497 		    !ns_capable(old->user_ns, CAP_SETUID))  in SYSCALL_DEFINE2()
501 	if (!uid_eq(new->uid, old->uid)) {  in SYSCALL_DEFINE2()
507 	    (euid != (uid_t) -1 && !uid_eq(keuid, old->uid)))  in SYSCALL_DEFINE2()
511 	retval = security_task_fix_setuid(new, old, LSM_SETID_RE);  in SYSCALL_DEFINE2()
536 	const struct cred *old;  in SYSCALL_DEFINE1()  local
548 	old = current_cred();  in SYSCALL_DEFINE1()
551 	if (ns_capable(old->user_ns, CAP_SETUID)) {  in SYSCALL_DEFINE1()
553 		if (!uid_eq(kuid, old->uid)) {  in SYSCALL_DEFINE1()
558 	} else if (!uid_eq(kuid, old->uid) && !uid_eq(kuid, new->suid)) {  in SYSCALL_DEFINE1()
564 	retval = security_task_fix_setuid(new, old, LSM_SETID_ID);  in SYSCALL_DEFINE1()
583 	const struct cred *old;  in SYSCALL_DEFINE3()  local
605 	old = current_cred();  in SYSCALL_DEFINE3()
608 	if (!ns_capable(old->user_ns, CAP_SETUID)) {  in SYSCALL_DEFINE3()
609 		if (ruid != (uid_t) -1        && !uid_eq(kruid, old->uid) &&  in SYSCALL_DEFINE3()
610 		    !uid_eq(kruid, old->euid) && !uid_eq(kruid, old->suid))  in SYSCALL_DEFINE3()
612 		if (euid != (uid_t) -1        && !uid_eq(keuid, old->uid) &&  in SYSCALL_DEFINE3()
613 		    !uid_eq(keuid, old->euid) && !uid_eq(keuid, old->suid))  in SYSCALL_DEFINE3()
615 		if (suid != (uid_t) -1        && !uid_eq(ksuid, old->uid) &&  in SYSCALL_DEFINE3()
616 		    !uid_eq(ksuid, old->euid) && !uid_eq(ksuid, old->suid))  in SYSCALL_DEFINE3()
622 		if (!uid_eq(kruid, old->uid)) {  in SYSCALL_DEFINE3()
634 	retval = security_task_fix_setuid(new, old, LSM_SETID_RES);  in SYSCALL_DEFINE3()
670 	const struct cred *old;  in SYSCALL_DEFINE3()  local
689 	old = current_cred();  in SYSCALL_DEFINE3()
692 	if (!ns_capable(old->user_ns, CAP_SETGID)) {  in SYSCALL_DEFINE3()
693 		if (rgid != (gid_t) -1        && !gid_eq(krgid, old->gid) &&  in SYSCALL_DEFINE3()
694 		    !gid_eq(krgid, old->egid) && !gid_eq(krgid, old->sgid))  in SYSCALL_DEFINE3()
696 		if (egid != (gid_t) -1        && !gid_eq(kegid, old->gid) &&  in SYSCALL_DEFINE3()
697 		    !gid_eq(kegid, old->egid) && !gid_eq(kegid, old->sgid))  in SYSCALL_DEFINE3()
699 		if (sgid != (gid_t) -1        && !gid_eq(ksgid, old->gid) &&  in SYSCALL_DEFINE3()
700 		    !gid_eq(ksgid, old->egid) && !gid_eq(ksgid, old->sgid))  in SYSCALL_DEFINE3()
748 	const struct cred *old;  in SYSCALL_DEFINE1()  local
753 	old = current_cred();  in SYSCALL_DEFINE1()
754 	old_fsuid = from_kuid_munged(old->user_ns, old->fsuid);  in SYSCALL_DEFINE1()
756 	kuid = make_kuid(old->user_ns, uid);  in SYSCALL_DEFINE1()
764 	if (uid_eq(kuid, old->uid)  || uid_eq(kuid, old->euid)  ||  in SYSCALL_DEFINE1()
765 	    uid_eq(kuid, old->suid) || uid_eq(kuid, old->fsuid) ||  in SYSCALL_DEFINE1()
766 	    ns_capable(old->user_ns, CAP_SETUID)) {  in SYSCALL_DEFINE1()
767 		if (!uid_eq(kuid, old->fsuid)) {  in SYSCALL_DEFINE1()
769 			if (security_task_fix_setuid(new, old, LSM_SETID_FS) == 0)  in SYSCALL_DEFINE1()
787 	const struct cred *old;  in SYSCALL_DEFINE1()  local
792 	old = current_cred();  in SYSCALL_DEFINE1()
793 	old_fsgid = from_kgid_munged(old->user_ns, old->fsgid);  in SYSCALL_DEFINE1()
795 	kgid = make_kgid(old->user_ns, gid);  in SYSCALL_DEFINE1()
803 	if (gid_eq(kgid, old->gid)  || gid_eq(kgid, old->egid)  ||  in SYSCALL_DEFINE1()
804 	    gid_eq(kgid, old->sgid) || gid_eq(kgid, old->fsgid) ||  in SYSCALL_DEFINE1()
805 	    ns_capable(old->user_ns, CAP_SETGID)) {  in SYSCALL_DEFINE1()
806 		if (!gid_eq(kgid, old->fsgid)) {  in SYSCALL_DEFINE1()
1453 	struct rlimit old, new;  in SYSCALL_DEFINE4()  local
1478 			old_rlim ? &old : NULL);  in SYSCALL_DEFINE4()
1481 		rlim_to_rlim64(&old, &old64);  in SYSCALL_DEFINE4()