251 	       const struct cred *old,  in cap_capset()  argument
258 			  cap_combine(old->cap_inheritable,  in cap_capset()
259 				      old->cap_permitted)))  in cap_capset()
264 			  cap_combine(old->cap_inheritable,  in cap_capset()
265 				      old->cap_bset)))  in cap_capset()
270 	if (!cap_issubset(*permitted, old->cap_permitted))  in cap_capset()
485 	const struct cred *old = current_cred();  in cap_bprm_set_creds()  local
517 			new->cap_permitted = cap_combine(old->cap_bset,  in cap_bprm_set_creds()
518 							 old->cap_inheritable);  in cap_bprm_set_creds()
526 	if (!cap_issubset(new->cap_permitted, old->cap_permitted))  in cap_bprm_set_creds()
535 	if ((!uid_eq(new->euid, old->uid) ||  in cap_bprm_set_creds()
536 	     !gid_eq(new->egid, old->gid) ||  in cap_bprm_set_creds()
537 	     !cap_issubset(new->cap_permitted, old->cap_permitted)) &&  in cap_bprm_set_creds()
546 						   old->cap_permitted);  in cap_bprm_set_creds()
574 			ret = audit_log_bprm_fcaps(bprm, new, old);  in cap_bprm_set_creds()
695 static inline void cap_emulate_setxuid(struct cred *new, const struct cred *old)  in cap_emulate_setxuid()  argument
697 	kuid_t root_uid = make_kuid(old->user_ns, 0);  in cap_emulate_setxuid()
699 	if ((uid_eq(old->uid, root_uid) ||  in cap_emulate_setxuid()
700 	     uid_eq(old->euid, root_uid) ||  in cap_emulate_setxuid()
701 	     uid_eq(old->suid, root_uid)) &&  in cap_emulate_setxuid()
709 	if (uid_eq(old->euid, root_uid) && !uid_eq(new->euid, root_uid))  in cap_emulate_setxuid()
711 	if (!uid_eq(old->euid, root_uid) && uid_eq(new->euid, root_uid))  in cap_emulate_setxuid()
724 int cap_task_fix_setuid(struct cred *new, const struct cred *old, int flags)  in cap_task_fix_setuid()  argument
733 			cap_emulate_setxuid(new, old);  in cap_task_fix_setuid()
744 			kuid_t root_uid = make_kuid(old->user_ns, 0);  in cap_task_fix_setuid()
745 			if (uid_eq(old->fsuid, root_uid) && !uid_eq(new->fsuid, root_uid))  in cap_task_fix_setuid()
749 			if (!uid_eq(old->fsuid, root_uid) && uid_eq(new->fsuid, root_uid))  in cap_task_fix_setuid()
860 	const struct cred *old = current_cred();  in cap_task_prctl()  local
867 		return !!cap_raised(old->cap_bset, arg2);  in cap_task_prctl()
892 		if ((((old->securebits & SECURE_ALL_LOCKS) >> 1)  in cap_task_prctl()
893 		     & (old->securebits ^ arg2))			/*[1]*/  in cap_task_prctl()
894 		    || ((old->securebits & SECURE_ALL_LOCKS & ~arg2))	/*[2]*/  in cap_task_prctl()
917 		return old->securebits;  in cap_task_prctl()