99 	struct landlock_ruleset *ruleset = filp->private_data;  in fop_ruleset_release()  local
101 	landlock_put_ruleset(ruleset);  in fop_ruleset_release()
162 	struct landlock_ruleset *ruleset;  in SYSCALL_DEFINE3()  local
192 	ruleset = landlock_create_ruleset(ruleset_attr.handled_access_fs);  in SYSCALL_DEFINE3()
193 	if (IS_ERR(ruleset))  in SYSCALL_DEFINE3()
194 		return PTR_ERR(ruleset);  in SYSCALL_DEFINE3()
198 				      ruleset, O_RDWR | O_CLOEXEC);  in SYSCALL_DEFINE3()
200 		landlock_put_ruleset(ruleset);  in SYSCALL_DEFINE3()
212 	struct landlock_ruleset *ruleset;  in get_ruleset_from_fd()  local
220 		ruleset = ERR_PTR(-EBADFD);  in get_ruleset_from_fd()
224 		ruleset = ERR_PTR(-EPERM);  in get_ruleset_from_fd()
227 	ruleset = ruleset_f.file->private_data;  in get_ruleset_from_fd()
228 	if (WARN_ON_ONCE(ruleset->num_layers != 1)) {  in get_ruleset_from_fd()
229 		ruleset = ERR_PTR(-EINVAL);  in get_ruleset_from_fd()
232 	landlock_get_ruleset(ruleset);  in get_ruleset_from_fd()
236 	return ruleset;  in get_ruleset_from_fd()
311 	struct landlock_ruleset *ruleset;  in SYSCALL_DEFINE4()  local
322 	ruleset = get_ruleset_from_fd(ruleset_fd, FMODE_CAN_WRITE);  in SYSCALL_DEFINE4()
323 	if (IS_ERR(ruleset))  in SYSCALL_DEFINE4()
324 		return PTR_ERR(ruleset);  in SYSCALL_DEFINE4()
351 	if ((path_beneath_attr.allowed_access | ruleset->fs_access_masks[0]) !=  in SYSCALL_DEFINE4()
352 	    ruleset->fs_access_masks[0]) {  in SYSCALL_DEFINE4()
363 	err = landlock_append_fs_rule(ruleset, &path,  in SYSCALL_DEFINE4()
368 	landlock_put_ruleset(ruleset);  in SYSCALL_DEFINE4()
400 	struct landlock_ruleset *new_dom, *ruleset;  in SYSCALL_DEFINE2()  local
421 	ruleset = get_ruleset_from_fd(ruleset_fd, FMODE_CAN_READ);  in SYSCALL_DEFINE2()
422 	if (IS_ERR(ruleset))  in SYSCALL_DEFINE2()
423 		return PTR_ERR(ruleset);  in SYSCALL_DEFINE2()
437 	new_dom = landlock_merge_ruleset(new_llcred->domain, ruleset);  in SYSCALL_DEFINE2()
447 	landlock_put_ruleset(ruleset);  in SYSCALL_DEFINE2()
454 	landlock_put_ruleset(ruleset);  in SYSCALL_DEFINE2()