82 		if (ns == cred->user_ns)  in cap_capable()
89 		if (ns->level <= cred->user_ns->level)  in cap_capable()
96 		if ((ns->parent == cred->user_ns) && uid_eq(ns->owner, cred->euid))  in cap_capable()
152 	if (cred->user_ns == child_cred->user_ns &&  in cap_ptrace_access_check()
155 	if (ns_capable(child_cred->user_ns, CAP_SYS_PTRACE))  in cap_ptrace_access_check()
184 	if (cred->user_ns == child_cred->user_ns &&  in cap_ptrace_traceme()
187 	if (has_ns_capability(parent, child_cred->user_ns, CAP_SYS_PTRACE))  in cap_ptrace_traceme()
230 	if (cap_capable(current_cred(), current_cred()->user_ns,  in cap_inh_is_capped()
830 	root_uid = make_kuid(new->user_ns, 0);  in cap_bprm_set_creds()
847 	     !ptracer_capable(current, new->user_ns))) {  in cap_bprm_set_creds()
849 		if (!ns_capable(new->user_ns, CAP_SETUID) ||  in cap_bprm_set_creds()
922 	struct user_namespace *user_ns = dentry->d_sb->s_user_ns;  in cap_inode_setxattr()  local
936 	if (!ns_capable(user_ns, CAP_SYS_ADMIN))  in cap_inode_setxattr()
954 	struct user_namespace *user_ns = dentry->d_sb->s_user_ns;  in cap_inode_removexattr()  local
971 	if (!ns_capable(user_ns, CAP_SYS_ADMIN))  in cap_inode_removexattr()
1007 	kuid_t root_uid = make_kuid(old->user_ns, 0);  in cap_emulate_setxuid()
1062 			kuid_t root_uid = make_kuid(old->user_ns, 0);  in cap_task_fix_setuid()
1098 	if (!is_subset && !ns_capable(__task_cred(p)->user_ns, CAP_SYS_NICE))  in cap_safe_nice()
1215 				    current_cred()->user_ns, CAP_SETPCAP,  in cap_task_prctl()