246 	       const struct cred *old,  in cap_capset()  argument
253 			  cap_combine(old->cap_inheritable,  in cap_capset()
254 				      old->cap_permitted)))  in cap_capset()
259 			  cap_combine(old->cap_inheritable,  in cap_capset()
260 				      old->cap_bset)))  in cap_capset()
265 	if (!cap_issubset(*permitted, old->cap_permitted))  in cap_capset()
491 	const struct cred *old = current_cred();  in cap_bprm_set_creds()  local
497 	if (WARN_ON(!cap_ambient_invariant_ok(old)))  in cap_bprm_set_creds()
526 			new->cap_permitted = cap_combine(old->cap_bset,  in cap_bprm_set_creds()
527 							 old->cap_inheritable);  in cap_bprm_set_creds()
535 	if (!cap_issubset(new->cap_permitted, old->cap_permitted))  in cap_bprm_set_creds()
544 	is_setid = !uid_eq(new->euid, old->uid) || !gid_eq(new->egid, old->gid);  in cap_bprm_set_creds()
547 	     !cap_issubset(new->cap_permitted, old->cap_permitted)) &&  in cap_bprm_set_creds()
556 						   old->cap_permitted);  in cap_bprm_set_creds()
602 			ret = audit_log_bprm_fcaps(bprm, new, old);  in cap_bprm_set_creds()
727 static inline void cap_emulate_setxuid(struct cred *new, const struct cred *old)  in cap_emulate_setxuid()  argument
729 	kuid_t root_uid = make_kuid(old->user_ns, 0);  in cap_emulate_setxuid()
731 	if ((uid_eq(old->uid, root_uid) ||  in cap_emulate_setxuid()
732 	     uid_eq(old->euid, root_uid) ||  in cap_emulate_setxuid()
733 	     uid_eq(old->suid, root_uid)) &&  in cap_emulate_setxuid()
749 	if (uid_eq(old->euid, root_uid) && !uid_eq(new->euid, root_uid))  in cap_emulate_setxuid()
751 	if (!uid_eq(old->euid, root_uid) && uid_eq(new->euid, root_uid))  in cap_emulate_setxuid()
764 int cap_task_fix_setuid(struct cred *new, const struct cred *old, int flags)  in cap_task_fix_setuid()  argument
773 			cap_emulate_setxuid(new, old);  in cap_task_fix_setuid()
784 			kuid_t root_uid = make_kuid(old->user_ns, 0);  in cap_task_fix_setuid()
785 			if (uid_eq(old->fsuid, root_uid) && !uid_eq(new->fsuid, root_uid))  in cap_task_fix_setuid()
789 			if (!uid_eq(old->fsuid, root_uid) && uid_eq(new->fsuid, root_uid))  in cap_task_fix_setuid()
900 	const struct cred *old = current_cred();  in cap_task_prctl()  local
907 		return !!cap_raised(old->cap_bset, arg2);  in cap_task_prctl()
932 		if ((((old->securebits & SECURE_ALL_LOCKS) >> 1)  in cap_task_prctl()
933 		     & (old->securebits ^ arg2))			/*[1]*/  in cap_task_prctl()
934 		    || ((old->securebits & SECURE_ALL_LOCKS & ~arg2))	/*[2]*/  in cap_task_prctl()
957 		return old->securebits;  in cap_task_prctl()