215 	tsec->osid = tsec->sid = SECINITSID_KERNEL;  in cred_init_security()
226 	return tsec->sid;  in cred_sid()
259 	u32 sid;  in task_sid_obj()  local
262 	sid = cred_sid(__task_cred(task));  in task_sid_obj()
264 	return sid;  in task_sid_obj()
422 static int may_context_mount_sb_relabel(u32 sid,  in may_context_mount_sb_relabel()  argument
429 	rc = avc_has_perm(tsec->sid, sbsec->sid, SECCLASS_FILESYSTEM,  in may_context_mount_sb_relabel()
434 	rc = avc_has_perm(tsec->sid, sid, SECCLASS_FILESYSTEM,  in may_context_mount_sb_relabel()
439 static int may_context_mount_inode_relabel(u32 sid,  in may_context_mount_inode_relabel()  argument
445 	rc = avc_has_perm(tsec->sid, sbsec->sid, SECCLASS_FILESYSTEM,  in may_context_mount_inode_relabel()
450 	rc = avc_has_perm(sid, sbsec->sid, SECCLASS_FILESYSTEM,  in may_context_mount_inode_relabel()
501 	u32 sid;  in sb_check_xattr_support()  local
534 				SECCLASS_DIR, &sid);  in sb_check_xattr_support()
541 	sbsec->sid = sid;  in sb_check_xattr_support()
686 			if (bad_option(sbsec, FSCONTEXT_MNT, sbsec->sid,  in selinux_set_mnt_opts()
700 			if (bad_option(sbsec, ROOTCONTEXT_MNT, root_isec->sid,  in selinux_set_mnt_opts()
784 		sbsec->sid = fscontext_sid;  in selinux_set_mnt_opts()
813 			sbsec->sid = context_sid;  in selinux_set_mnt_opts()
833 		root_isec->sid = rootcontext_sid;  in selinux_set_mnt_opts()
879 	if ((oldflags & FSCONTEXT_MNT) && old->sid != new->sid)  in selinux_cmp_sb_context()
888 		if (oldroot->sid != newroot->sid)  in selinux_cmp_sb_context()
947 	newsbsec->sid = oldsbsec->sid;  in selinux_sb_clone_mnt_opts()
964 		u32 sid = oldsbsec->mntpoint_sid;  in selinux_sb_clone_mnt_opts()  local
967 			newsbsec->sid = sid;  in selinux_sb_clone_mnt_opts()
970 			newisec->sid = sid;  in selinux_sb_clone_mnt_opts()
972 		newsbsec->mntpoint_sid = sid;  in selinux_sb_clone_mnt_opts()
978 		newisec->sid = oldisec->sid;  in selinux_sb_clone_mnt_opts()
1050 static int show_sid(struct seq_file *m, u32 sid)  in show_sid()  argument
1056 	rc = security_sid_to_context(sid, &context, &len);  in show_sid()
1085 		rc = show_sid(m, sbsec->sid);  in selinux_sb_show_options()
1108 		rc = show_sid(m, isec->sid);  in selinux_sb_show_options()
1310 				 u32 *sid)  in selinux_genfs_get_sid()  argument
1334 					path, tclass, sid);  in selinux_genfs_get_sid()
1337 			*sid = SECINITSID_UNLABELED;  in selinux_genfs_get_sid()
1346 				  u32 def_sid, u32 *sid)  in inode_doinit_use_xattr()  argument
1384 		*sid = def_sid;  in inode_doinit_use_xattr()
1388 	rc = security_context_to_sid_default(context, rc, sid,  in inode_doinit_use_xattr()
1411 	u32 task_sid, sid = 0;  in inode_doinit_with_dentry()  local
1440 	sid = isec->sid;  in inode_doinit_with_dentry()
1452 			sid = sbsec->def_sid;  in inode_doinit_with_dentry()
1485 					    &sid);  in inode_doinit_with_dentry()
1491 		sid = task_sid;  in inode_doinit_with_dentry()
1495 		sid = sbsec->sid;  in inode_doinit_with_dentry()
1498 		rc = security_transition_sid(task_sid, sid,  in inode_doinit_with_dentry()
1499 					     sclass, NULL, &sid);  in inode_doinit_with_dentry()
1504 		sid = sbsec->mntpoint_sid;  in inode_doinit_with_dentry()
1508 		sid = sbsec->sid;  in inode_doinit_with_dentry()
1540 						   sbsec->flags, &sid);  in inode_doinit_with_dentry()
1549 							    sid, &sid);  in inode_doinit_with_dentry()
1568 		isec->sid = sid;  in inode_doinit_with_dentry()
1579 		isec->sid = sid;  in inode_doinit_with_dentry()
1623 	u32 sid = cred_sid(cred);  in cred_has_capability()  local
1643 	rc = avc_has_perm_noaudit(sid, sid, sclass, av, 0, &avd);  in cred_has_capability()
1645 		int rc2 = avc_audit(sid, sid, sclass, av, &avd, rc, &ad);  in cred_has_capability()
1661 	u32 sid;  in inode_has_perm()  local
1668 	sid = cred_sid(cred);  in inode_has_perm()
1671 	return avc_has_perm(sid, isec->sid, isec->sclass, perms, adp);  in inode_has_perm()
1719 static int bpf_fd_pass(const struct file *file, u32 sid);
1737 	u32 sid = cred_sid(cred);  in file_has_perm()  local
1743 	if (sid != fsec->sid) {  in file_has_perm()
1744 		rc = avc_has_perm(sid, fsec->sid,  in file_has_perm()
1787 		return security_transition_sid(tsec->sid,  in selinux_determine_inode_label()
1788 					       dsec->sid, tclass,  in selinux_determine_inode_label()
1803 	u32 sid, newsid;  in may_create()  local
1810 	sid = tsec->sid;  in may_create()
1815 	rc = avc_has_perm(sid, dsec->sid, SECCLASS_DIR,  in may_create()
1826 	rc = avc_has_perm(sid, newsid, tclass, FILE__CREATE, &ad);  in may_create()
1830 	return avc_has_perm(newsid, sbsec->sid,  in may_create()
1847 	u32 sid = current_sid();  in may_link()  local
1859 	rc = avc_has_perm(sid, dsec->sid, SECCLASS_DIR, av, &ad);  in may_link()
1879 	rc = avc_has_perm(sid, isec->sid, isec->sclass, av, &ad);  in may_link()
1890 	u32 sid = current_sid();  in may_rename()  local
1903 	rc = avc_has_perm(sid, old_dsec->sid, SECCLASS_DIR,  in may_rename()
1907 	rc = avc_has_perm(sid, old_isec->sid,  in may_rename()
1912 		rc = avc_has_perm(sid, old_isec->sid,  in may_rename()
1922 	rc = avc_has_perm(sid, new_dsec->sid, SECCLASS_DIR, av, &ad);  in may_rename()
1928 		rc = avc_has_perm(sid, new_isec->sid,  in may_rename()
1945 	u32 sid = cred_sid(cred);  in superblock_has_perm()  local
1948 	return avc_has_perm(sid, sbsec->sid, SECCLASS_FILESYSTEM, perms, ad);  in superblock_has_perm()
2057 	u32 sid = cred_sid(to);  in selinux_binder_transfer_file()  local
2067 	if (sid != fsec->sid) {  in selinux_binder_transfer_file()
2068 		rc = avc_has_perm(sid, fsec->sid,  in selinux_binder_transfer_file()
2077 	rc = bpf_fd_pass(file, sid);  in selinux_binder_transfer_file()
2086 	return avc_has_perm(sid, isec->sid, isec->sclass, file_to_av(file),  in selinux_binder_transfer_file()
2093 	u32 sid = current_sid();  in selinux_ptrace_access_check()  local
2097 		return avc_has_perm(sid, csid, SECCLASS_FILE, FILE__READ,  in selinux_ptrace_access_check()
2100 	return avc_has_perm(sid, csid, SECCLASS_PROCESS, PROCESS__PTRACE,  in selinux_ptrace_access_check()
2228 	u32 sid = 0;  in ptrace_parent_sid()  local
2234 		sid = task_sid_obj(tracer);  in ptrace_parent_sid()
2237 	return sid;  in ptrace_parent_sid()
2252 	if (new_tsec->sid == old_tsec->sid)  in check_nnp_nosuid()
2267 		rc = avc_has_perm(old_tsec->sid, new_tsec->sid,  in check_nnp_nosuid()
2278 	rc = security_bounded_transition(old_tsec->sid,  in check_nnp_nosuid()
2279 					 new_tsec->sid);  in check_nnp_nosuid()
2310 	new_tsec->sid = old_tsec->sid;  in selinux_bprm_creds_for_exec()
2311 	new_tsec->osid = old_tsec->sid;  in selinux_bprm_creds_for_exec()
2319 		new_tsec->sid = old_tsec->exec_sid;  in selinux_bprm_creds_for_exec()
2329 		rc = security_transition_sid(old_tsec->sid,  in selinux_bprm_creds_for_exec()
2330 					     isec->sid, SECCLASS_PROCESS, NULL,  in selinux_bprm_creds_for_exec()
2331 					     &new_tsec->sid);  in selinux_bprm_creds_for_exec()
2341 			new_tsec->sid = old_tsec->sid;  in selinux_bprm_creds_for_exec()
2347 	if (new_tsec->sid == old_tsec->sid) {  in selinux_bprm_creds_for_exec()
2348 		rc = avc_has_perm(old_tsec->sid, isec->sid,  in selinux_bprm_creds_for_exec()
2354 		rc = avc_has_perm(old_tsec->sid, new_tsec->sid,  in selinux_bprm_creds_for_exec()
2359 		rc = avc_has_perm(new_tsec->sid, isec->sid,  in selinux_bprm_creds_for_exec()
2366 			rc = avc_has_perm(old_tsec->sid, new_tsec->sid,  in selinux_bprm_creds_for_exec()
2378 				rc = avc_has_perm(ptsid, new_tsec->sid,  in selinux_bprm_creds_for_exec()
2392 		rc = avc_has_perm(old_tsec->sid, new_tsec->sid,  in selinux_bprm_creds_for_exec()
2465 	if (new_tsec->sid == new_tsec->osid)  in selinux_bprm_committing_creds()
2484 	rc = avc_has_perm(new_tsec->osid, new_tsec->sid, SECCLASS_PROCESS,  in selinux_bprm_committing_creds()
2507 	u32 osid, sid;  in selinux_bprm_committed_creds()  local
2511 	sid = tsec->sid;  in selinux_bprm_committed_creds()
2513 	if (sid == osid)  in selinux_bprm_committed_creds()
2523 	rc = avc_has_perm(osid, sid, SECCLASS_PROCESS, PROCESS__SIGINH, NULL);  in selinux_bprm_committed_creds()
2554 	sbsec->sid = SECINITSID_UNLABELED;  in selinux_sb_alloc_security()
2657 		if (bad_option(sbsec, FSCONTEXT_MNT, sbsec->sid,  in selinux_sb_mnt_opts_compat()
2670 		if (bad_option(sbsec, ROOTCONTEXT_MNT, root_isec->sid,  in selinux_sb_mnt_opts_compat()
2694 		if (bad_option(sbsec, FSCONTEXT_MNT, sbsec->sid,  in selinux_sb_remount()
2706 		if (bad_option(sbsec, ROOTCONTEXT_MNT, root_isec->sid,  in selinux_sb_remount()
2793 		opts->fscontext_sid = sbsec->sid;  in selinux_fs_context_submount()
2841 	u32 sid = current_sid();  in selinux_inode_alloc_security()  local
2846 	isec->sid = SECINITSID_UNLABELED;  in selinux_inode_alloc_security()
2848 	isec->task_sid = sid;  in selinux_inode_alloc_security()
2927 		isec->sid = newsid;  in selinux_inode_init_security()
2977 		isec->sid = context_isec->sid;  in selinux_inode_init_security_anon()
2981 			tsec->sid, tsec->sid,  in selinux_inode_init_security_anon()
2982 			isec->sclass, name, &isec->sid);  in selinux_inode_init_security_anon()
2996 	return avc_has_perm(tsec->sid,  in selinux_inode_init_security_anon()
2997 			    isec->sid,  in selinux_inode_init_security_anon()
3057 	u32 sid;  in selinux_inode_follow_link()  local
3063 	sid = cred_sid(cred);  in selinux_inode_follow_link()
3068 	return avc_has_perm(sid, isec->sid, isec->sclass, FILE__READ, &ad);  in selinux_inode_follow_link()
3081 	return slow_avc_audit(current_sid(), isec->sid, isec->sclass, perms,  in audit_inode_permission()
3092 	u32 sid;  in selinux_inode_permission()  local
3111 	sid = cred_sid(cred);  in selinux_inode_permission()
3116 	rc = avc_has_perm_noaudit(sid, isec->sid, isec->sclass, perms, 0,  in selinux_inode_permission()
3183 	u32 newsid, sid = current_sid();  in selinux_inode_setxattr()  local
3210 	rc = avc_has_perm(sid, isec->sid, isec->sclass,  in selinux_inode_setxattr()
3250 	rc = avc_has_perm(sid, newsid, isec->sclass,  in selinux_inode_setxattr()
3255 	rc = security_validate_transition(isec->sid, newsid,  in selinux_inode_setxattr()
3256 					  sid, isec->sclass);  in selinux_inode_setxattr()
3261 			    sbsec->sid,  in selinux_inode_setxattr()
3321 	isec->sid = newsid;  in selinux_inode_post_setxattr()
3438 		error = security_sid_to_context_force(isec->sid, &context,  in selinux_inode_getsecurity()
3441 		error = security_sid_to_context(isec->sid,  in selinux_inode_getsecurity()
3480 	isec->sid = newsid;  in selinux_inode_setsecurity()
3501 	*secid = isec->sid;  in selinux_inode_getsecid()
3506 	u32 sid;  in selinux_inode_copy_up()  local
3518 	selinux_inode_getsecid(d_inode(src), &sid);  in selinux_inode_copy_up()
3519 	tsec->create_sid = sid;  in selinux_inode_copy_up()
3581 		rc = security_transition_sid(tsec->sid,  in selinux_kernfs_init_security()
3620 	u32 sid = current_sid();  in selinux_file_permission()  local
3627 	if (sid == fsec->sid && fsec->isid == isec->sid &&  in selinux_file_permission()
3638 	u32 sid = current_sid();  in selinux_file_alloc_security()  local
3640 	fsec->sid = sid;  in selinux_file_alloc_security()
3641 	fsec->fown_sid = sid;  in selinux_file_alloc_security()
3668 	if (ssid != fsec->sid) {  in ioctl_has_perm()
3669 		rc = avc_has_perm(ssid, fsec->sid,  in ioctl_has_perm()
3681 	rc = avc_has_extended_perms(ssid, isec->sid, isec->sclass,  in ioctl_has_perm()
3739 	u32 sid = cred_sid(cred);  in file_map_prot_check()  local
3750 		rc = avc_has_perm(sid, sid, SECCLASS_PROCESS,  in file_map_prot_check()
3779 		u32 sid = current_sid();  in selinux_mmap_addr()  local
3780 		rc = avc_has_perm(sid, sid, SECCLASS_MEMPROTECT,  in selinux_mmap_addr()
3812 	u32 sid = cred_sid(cred);  in selinux_file_mprotect()  local
3818 			rc = avc_has_perm(sid, sid, SECCLASS_PROCESS,  in selinux_file_mprotect()
3822 			rc = avc_has_perm(sid, sid, SECCLASS_PROCESS,  in selinux_file_mprotect()
3900 	u32 sid = task_sid_obj(tsk);  in selinux_file_send_sigiotask()  local
3914 	return avc_has_perm(fsec->fown_sid, sid,  in selinux_file_send_sigiotask()
3939 	fsec->isid = isec->sid;  in selinux_file_open()
3957 	u32 sid = current_sid();  in selinux_task_alloc()  local
3959 	return avc_has_perm(sid, sid, SECCLASS_PROCESS, PROCESS__FORK, NULL);  in selinux_task_alloc()
3998 	u32 sid = current_sid();  in selinux_kernel_act_as()  local
4001 	ret = avc_has_perm(sid, secid,  in selinux_kernel_act_as()
4006 		tsec->sid = secid;  in selinux_kernel_act_as()
4022 	u32 sid = current_sid();  in selinux_kernel_create_files_as()  local
4025 	ret = avc_has_perm(sid, isec->sid,  in selinux_kernel_create_files_as()
4031 		tsec->create_sid = isec->sid;  in selinux_kernel_create_files_as()
4051 	u32 sid = current_sid();  in selinux_kernel_module_from_file()  local
4056 		return avc_has_perm(sid, sid, SECCLASS_SYSTEM,  in selinux_kernel_module_from_file()
4065 	if (sid != fsec->sid) {  in selinux_kernel_module_from_file()
4066 		rc = avc_has_perm(sid, fsec->sid, SECCLASS_FD, FD__USE, &ad);  in selinux_kernel_module_from_file()
4072 	return avc_has_perm(sid, isec->sid, SECCLASS_SYSTEM,  in selinux_kernel_module_from_file()
4224 	u32 sid = task_sid_obj(p);  in selinux_task_to_inode()  local
4228 	isec->sid = sid;  in selinux_task_to_inode()
4235 	u32 sid = current_sid();  in selinux_userns_create()  local
4237 	return avc_has_perm(sid, sid, SECCLASS_USER_NAMESPACE,  in selinux_userns_create()
4482 static int selinux_skb_peerlbl_sid(struct sk_buff *skb, u16 family, u32 *sid)  in selinux_skb_peerlbl_sid()  argument
4497 					   nlbl_type, xfrm_sid, sid);  in selinux_skb_peerlbl_sid()
4543 	return security_transition_sid(tsec->sid, tsec->sid,  in socket_sockcreate_sid()
4553 	if (sksec->sid == SECINITSID_KERNEL)  in sock_has_perm()
4558 	return avc_has_perm(current_sid(), sksec->sid, sksec->sclass, perms,  in sock_has_perm()
4578 	return avc_has_perm(tsec->sid, newsid, secclass, SOCKET__CREATE, NULL);  in selinux_socket_create()
4588 	u32 sid = SECINITSID_KERNEL;  in selinux_socket_post_create()  local
4592 		err = socket_sockcreate_sid(tsec, sclass, &sid);  in selinux_socket_post_create()
4598 	isec->sid = sid;  in selinux_socket_post_create()
4604 		sksec->sid = sid;  in selinux_socket_post_create()
4621 	sksec_a->peer_sid = sksec_b->sid;  in selinux_socket_socketpair()
4622 	sksec_b->peer_sid = sksec_a->sid;  in selinux_socket_socketpair()
4652 		u32 sid, node_perm;  in selinux_socket_bind()  local
4704 						      snum, &sid);  in selinux_socket_bind()
4707 				err = avc_has_perm(sksec->sid, sid,  in selinux_socket_bind()
4737 		err = sel_netnode_sid(addrp, family_sa, &sid);  in selinux_socket_bind()
4746 		err = avc_has_perm(sksec->sid, sid,  in selinux_socket_bind()
4794 		u32 sid, perm;  in selinux_socket_connect_helper()  local
4824 		err = sel_netport_sid(sk->sk_protocol, snum, &sid);  in selinux_socket_connect_helper()
4844 		err = avc_has_perm(sksec->sid, sid, sksec->sclass, perm, &ad);  in selinux_socket_connect_helper()
4877 	u32 sid;  in selinux_socket_accept()  local
4886 	sid = isec->sid;  in selinux_socket_accept()
4891 	newisec->sid = sid;  in selinux_socket_accept()
4954 	err = avc_has_perm(sksec_sock->sid, sksec_other->sid,  in selinux_socket_unix_stream_connect()
4961 	sksec_new->peer_sid = sksec_sock->sid;  in selinux_socket_unix_stream_connect()
4962 	err = security_sid_mls_copy(sksec_other->sid,  in selinux_socket_unix_stream_connect()
4963 				    sksec_sock->sid, &sksec_new->sid);  in selinux_socket_unix_stream_connect()
4968 	sksec_sock->peer_sid = sksec_new->sid;  in selinux_socket_unix_stream_connect()
4983 	return avc_has_perm(ssec->sid, osec->sid, osec->sclass, SOCKET__SENDTO,  in selinux_socket_unix_may_send()
5015 	u32 sk_sid = sksec->sid;  in selinux_sock_rcv_skb_compat()
5035 	err = selinux_xfrm_sock_rcv_skb(sksec->sid, skb, &ad);  in selinux_sock_rcv_skb_compat()
5045 	u32 sk_sid = sksec->sid;  in selinux_socket_sock_rcv_skb()
5156 		peer_secid = isec->sid;  in selinux_socket_getpeersec_dgram()
5176 	sksec->sid = SECINITSID_UNLABELED;  in selinux_sk_alloc_security()
5198 	newsksec->sid = sksec->sid;  in selinux_sk_clone_security()
5212 		*secid = sksec->sid;  in selinux_sk_getsecid()
5224 		isec->sid = sksec->sid;  in selinux_sock_graft()
5309 	err = selinux_conn_sid(sksec->sid, asoc->peer_secid, &conn_sid);  in selinux_sctp_assoc_request()
5334 	asoc->secid = sksec->sid;  in selinux_sctp_assoc_established()
5433 	newsksec->sid = asoc->secid;  in selinux_sctp_sk_clone()
5445 	ssksec->sid = sksec->sid;  in selinux_mptcp_add_subflow()
5466 	err = selinux_conn_sid(sksec->sid, peersid, &connsid);  in selinux_inet_conn_request()
5480 	newsksec->sid = req->secid;  in selinux_inet_csk_clone()
5504 static int selinux_secmark_relabel_packet(u32 sid)  in selinux_secmark_relabel_packet()  argument
5510 	tsid = tsec->sid;  in selinux_secmark_relabel_packet()
5512 	return avc_has_perm(tsid, sid, SECCLASS_PACKET, PACKET__RELABELTO,  in selinux_secmark_relabel_packet()
5539 	tunsec->sid = current_sid();  in selinux_tun_dev_alloc_security()
5552 	u32 sid = current_sid();  in selinux_tun_dev_create()  local
5561 	return avc_has_perm(sid, sid, SECCLASS_TUN_SOCKET, TUN_SOCKET__CREATE,  in selinux_tun_dev_create()
5569 	return avc_has_perm(current_sid(), tunsec->sid, SECCLASS_TUN_SOCKET,  in selinux_tun_dev_attach_queue()
5585 	sksec->sid = tunsec->sid;  in selinux_tun_dev_attach()
5594 	u32 sid = current_sid();  in selinux_tun_dev_open()  local
5597 	err = avc_has_perm(sid, tunsec->sid, SECCLASS_TUN_SOCKET,  in selinux_tun_dev_open()
5601 	err = avc_has_perm(sid, sid, SECCLASS_TUN_SOCKET,  in selinux_tun_dev_open()
5605 	tunsec->sid = sid;  in selinux_tun_dev_open()
5671 	u32 sid;  in selinux_ip_output()  local
5700 		sid = sksec->sid;  in selinux_ip_output()
5702 		sid = SECINITSID_KERNEL;  in selinux_ip_output()
5703 	if (selinux_netlbl_skbuff_setsid(skb, state->pf, sid) != 0)  in selinux_ip_output()
5729 		if (avc_has_perm(sksec->sid, skb->secmark,  in selinux_ip_postroute_compat()
5733 	if (selinux_xfrm_postroute_last(sksec->sid, skb, &ad, proto))  in selinux_ip_postroute_compat()
5834 		if (selinux_conn_sid(sksec->sid, skb_sid, &peer_sid))  in selinux_ip_postroute()
5841 		peer_sid = sksec->sid;  in selinux_ip_postroute()
5937 	isec->sid = current_sid();  in ipc_init_security()
5945 	u32 sid = current_sid();  in ipc_has_perm()  local
5952 	return avc_has_perm(sid, isec->sid, isec->sclass, perms, &ad);  in ipc_has_perm()
5960 	msec->sid = SECINITSID_UNLABELED;  in selinux_msg_msg_alloc_security()
5970 	u32 sid = current_sid();  in selinux_msg_queue_alloc_security()  local
5978 	return avc_has_perm(sid, isec->sid, SECCLASS_MSGQ,  in selinux_msg_queue_alloc_security()
5986 	u32 sid = current_sid();  in selinux_msg_queue_associate()  local
5993 	return avc_has_perm(sid, isec->sid, SECCLASS_MSGQ,  in selinux_msg_queue_associate()
6030 	u32 sid = current_sid();  in selinux_msg_queue_msgsnd()  local
6039 	if (msec->sid == SECINITSID_UNLABELED) {  in selinux_msg_queue_msgsnd()
6044 		rc = security_transition_sid(sid, isec->sid,  in selinux_msg_queue_msgsnd()
6045 					     SECCLASS_MSG, NULL, &msec->sid);  in selinux_msg_queue_msgsnd()
6054 	rc = avc_has_perm(sid, isec->sid, SECCLASS_MSGQ,  in selinux_msg_queue_msgsnd()
6058 		rc = avc_has_perm(sid, msec->sid, SECCLASS_MSG,  in selinux_msg_queue_msgsnd()
6062 		rc = avc_has_perm(msec->sid, isec->sid, SECCLASS_MSGQ,  in selinux_msg_queue_msgsnd()
6075 	u32 sid = task_sid_obj(target);  in selinux_msg_queue_msgrcv()  local
6084 	rc = avc_has_perm(sid, isec->sid,  in selinux_msg_queue_msgrcv()
6087 		rc = avc_has_perm(sid, msec->sid,  in selinux_msg_queue_msgrcv()
6097 	u32 sid = current_sid();  in selinux_shm_alloc_security()  local
6105 	return avc_has_perm(sid, isec->sid, SECCLASS_SHM,  in selinux_shm_alloc_security()
6113 	u32 sid = current_sid();  in selinux_shm_associate()  local
6120 	return avc_has_perm(sid, isec->sid, SECCLASS_SHM,  in selinux_shm_associate()
6175 	u32 sid = current_sid();  in selinux_sem_alloc_security()  local
6183 	return avc_has_perm(sid, isec->sid, SECCLASS_SEM,  in selinux_sem_alloc_security()
6191 	u32 sid = current_sid();  in selinux_sem_associate()  local
6198 	return avc_has_perm(sid, isec->sid, SECCLASS_SEM,  in selinux_sem_associate()
6278 	*secid = isec->sid;  in selinux_ipc_getsecid()
6291 	u32 sid;  in selinux_getprocattr()  local
6299 		error = avc_has_perm(current_sid(), __tsec->sid,  in selinux_getprocattr()
6306 		sid = __tsec->sid;  in selinux_getprocattr()
6308 		sid = __tsec->osid;  in selinux_getprocattr()
6310 		sid = __tsec->exec_sid;  in selinux_getprocattr()
6312 		sid = __tsec->create_sid;  in selinux_getprocattr()
6314 		sid = __tsec->keycreate_sid;  in selinux_getprocattr()
6316 		sid = __tsec->sockcreate_sid;  in selinux_getprocattr()
6323 	if (!sid)  in selinux_getprocattr()
6326 	error = security_sid_to_context(sid, value, &len);  in selinux_getprocattr()
6340 	u32 mysid = current_sid(), sid = 0, ptsid;  in selinux_setprocattr()  local
6374 						&sid, GFP_KERNEL);  in selinux_setprocattr()
6398 							&sid);  in selinux_setprocattr()
6416 		tsec->exec_sid = sid;  in selinux_setprocattr()
6418 		tsec->create_sid = sid;  in selinux_setprocattr()
6420 		if (sid) {  in selinux_setprocattr()
6421 			error = avc_has_perm(mysid, sid,  in selinux_setprocattr()
6426 		tsec->keycreate_sid = sid;  in selinux_setprocattr()
6428 		tsec->sockcreate_sid = sid;  in selinux_setprocattr()
6431 		if (sid == 0)  in selinux_setprocattr()
6436 			error = security_bounded_transition(tsec->sid, sid);  in selinux_setprocattr()
6442 		error = avc_has_perm(tsec->sid, sid, SECCLASS_PROCESS,  in selinux_setprocattr()
6451 			error = avc_has_perm(ptsid, sid, SECCLASS_PROCESS,  in selinux_setprocattr()
6457 		tsec->sid = sid;  in selinux_setprocattr()
6546 		ksec->sid = tsec->keycreate_sid;  in selinux_key_alloc()
6548 		ksec->sid = tsec->sid;  in selinux_key_alloc()
6568 	u32 perm, sid;  in selinux_key_permission()  local
6600 	sid = cred_sid(cred);  in selinux_key_permission()
6604 	return avc_has_perm(sid, ksec->sid, SECCLASS_KEY, perm, NULL);  in selinux_key_permission()
6614 	rc = security_sid_to_context(ksec->sid,  in selinux_key_getsecurity()
6626 	u32 sid = current_sid();  in selinux_watch_key()  local
6628 	return avc_has_perm(sid, ksec->sid, SECCLASS_KEY, KEY__VIEW, NULL);  in selinux_watch_key()
6638 	u32 sid = 0;  in selinux_ib_pkey_access()  local
6642 	err = sel_ib_pkey_sid(subnet_prefix, pkey_val, &sid);  in selinux_ib_pkey_access()
6650 	return avc_has_perm(sec->sid, sid,  in selinux_ib_pkey_access()
6660 	u32 sid = 0;  in selinux_ib_endport_manage_subnet()  local
6665 				      &sid);  in selinux_ib_endport_manage_subnet()
6674 	return avc_has_perm(sec->sid, sid,  in selinux_ib_endport_manage_subnet()
6686 	sec->sid = current_sid();  in selinux_ib_alloc_security()
6702 	u32 sid = current_sid();  in selinux_bpf()  local
6707 		ret = avc_has_perm(sid, sid, SECCLASS_BPF, BPF__MAP_CREATE,  in selinux_bpf()
6711 		ret = avc_has_perm(sid, sid, SECCLASS_BPF, BPF__PROG_LOAD,  in selinux_bpf()
6741 static int bpf_fd_pass(const struct file *file, u32 sid)  in bpf_fd_pass()  argument
6751 		ret = avc_has_perm(sid, bpfsec->sid, SECCLASS_BPF,  in bpf_fd_pass()
6758 		ret = avc_has_perm(sid, bpfsec->sid, SECCLASS_BPF,  in bpf_fd_pass()
6768 	u32 sid = current_sid();  in selinux_bpf_map()  local
6772 	return avc_has_perm(sid, bpfsec->sid, SECCLASS_BPF,  in selinux_bpf_map()
6778 	u32 sid = current_sid();  in selinux_bpf_prog()  local
6782 	return avc_has_perm(sid, bpfsec->sid, SECCLASS_BPF,  in selinux_bpf_prog()
6794 	bpfsec->sid = current_sid();  in selinux_bpf_map_alloc()
6816 	bpfsec->sid = current_sid();  in selinux_bpf_prog_alloc()
6844 	u32 requested, sid = current_sid();  in selinux_perf_event_open()  local
6857 	return avc_has_perm(sid, sid, SECCLASS_PERF_EVENT,  in selinux_perf_event_open()
6869 	perfsec->sid = current_sid();  in selinux_perf_event_alloc()
6886 	u32 sid = current_sid();  in selinux_perf_event_read()  local
6888 	return avc_has_perm(sid, perfsec->sid,  in selinux_perf_event_read()
6895 	u32 sid = current_sid();  in selinux_perf_event_write()  local
6897 	return avc_has_perm(sid, perfsec->sid,  in selinux_perf_event_write()
6924 	u32 sid = current_sid();  in selinux_uring_sqpoll()  local
6926 	return avc_has_perm(sid, sid,  in selinux_uring_sqpoll()
6948 	return avc_has_perm(current_sid(), isec->sid,  in selinux_uring_cmd()