355 	const struct cred *old;  in __sys_setregid()  local
371 	old = current_cred();  in __sys_setregid()
375 		if (gid_eq(old->gid, krgid) ||  in __sys_setregid()
376 		    gid_eq(old->egid, krgid) ||  in __sys_setregid()
377 		    ns_capable(old->user_ns, CAP_SETGID))  in __sys_setregid()
383 		if (gid_eq(old->gid, kegid) ||  in __sys_setregid()
384 		    gid_eq(old->egid, kegid) ||  in __sys_setregid()
385 		    gid_eq(old->sgid, kegid) ||  in __sys_setregid()
386 		    ns_capable(old->user_ns, CAP_SETGID))  in __sys_setregid()
393 	    (egid != (gid_t) -1 && !gid_eq(kegid, old->gid)))  in __sys_setregid()
417 	const struct cred *old;  in __sys_setgid()  local
429 	old = current_cred();  in __sys_setgid()
432 	if (ns_capable(old->user_ns, CAP_SETGID))  in __sys_setgid()
434 	else if (gid_eq(kgid, old->gid) || gid_eq(kgid, old->sgid))  in __sys_setgid()
498 	const struct cred *old;  in __sys_setreuid()  local
514 	old = current_cred();  in __sys_setreuid()
519 		if (!uid_eq(old->uid, kruid) &&  in __sys_setreuid()
520 		    !uid_eq(old->euid, kruid) &&  in __sys_setreuid()
521 		    !ns_capable_setid(old->user_ns, CAP_SETUID))  in __sys_setreuid()
527 		if (!uid_eq(old->uid, keuid) &&  in __sys_setreuid()
528 		    !uid_eq(old->euid, keuid) &&  in __sys_setreuid()
529 		    !uid_eq(old->suid, keuid) &&  in __sys_setreuid()
530 		    !ns_capable_setid(old->user_ns, CAP_SETUID))  in __sys_setreuid()
534 	if (!uid_eq(new->uid, old->uid)) {  in __sys_setreuid()
540 	    (euid != (uid_t) -1 && !uid_eq(keuid, old->uid)))  in __sys_setreuid()
544 	retval = security_task_fix_setuid(new, old, LSM_SETID_RE);  in __sys_setreuid()
574 	const struct cred *old;  in __sys_setuid()  local
586 	old = current_cred();  in __sys_setuid()
589 	if (ns_capable_setid(old->user_ns, CAP_SETUID)) {  in __sys_setuid()
591 		if (!uid_eq(kuid, old->uid)) {  in __sys_setuid()
596 	} else if (!uid_eq(kuid, old->uid) && !uid_eq(kuid, new->suid)) {  in __sys_setuid()
602 	retval = security_task_fix_setuid(new, old, LSM_SETID_ID);  in __sys_setuid()
626 	const struct cred *old;  in __sys_setresuid()  local
648 	old = current_cred();  in __sys_setresuid()
651 	if (!ns_capable_setid(old->user_ns, CAP_SETUID)) {  in __sys_setresuid()
652 		if (ruid != (uid_t) -1        && !uid_eq(kruid, old->uid) &&  in __sys_setresuid()
653 		    !uid_eq(kruid, old->euid) && !uid_eq(kruid, old->suid))  in __sys_setresuid()
655 		if (euid != (uid_t) -1        && !uid_eq(keuid, old->uid) &&  in __sys_setresuid()
656 		    !uid_eq(keuid, old->euid) && !uid_eq(keuid, old->suid))  in __sys_setresuid()
658 		if (suid != (uid_t) -1        && !uid_eq(ksuid, old->uid) &&  in __sys_setresuid()
659 		    !uid_eq(ksuid, old->euid) && !uid_eq(ksuid, old->suid))  in __sys_setresuid()
665 		if (!uid_eq(kruid, old->uid)) {  in __sys_setresuid()
677 	retval = security_task_fix_setuid(new, old, LSM_SETID_RES);  in __sys_setresuid()
718 	const struct cred *old;  in __sys_setresgid()  local
737 	old = current_cred();  in __sys_setresgid()
740 	if (!ns_capable(old->user_ns, CAP_SETGID)) {  in __sys_setresgid()
741 		if (rgid != (gid_t) -1        && !gid_eq(krgid, old->gid) &&  in __sys_setresgid()
742 		    !gid_eq(krgid, old->egid) && !gid_eq(krgid, old->sgid))  in __sys_setresgid()
744 		if (egid != (gid_t) -1        && !gid_eq(kegid, old->gid) &&  in __sys_setresgid()
745 		    !gid_eq(kegid, old->egid) && !gid_eq(kegid, old->sgid))  in __sys_setresgid()
747 		if (sgid != (gid_t) -1        && !gid_eq(ksgid, old->gid) &&  in __sys_setresgid()
748 		    !gid_eq(ksgid, old->egid) && !gid_eq(ksgid, old->sgid))  in __sys_setresgid()
801 	const struct cred *old;  in __sys_setfsuid()  local
806 	old = current_cred();  in __sys_setfsuid()
807 	old_fsuid = from_kuid_munged(old->user_ns, old->fsuid);  in __sys_setfsuid()
809 	kuid = make_kuid(old->user_ns, uid);  in __sys_setfsuid()
817 	if (uid_eq(kuid, old->uid)  || uid_eq(kuid, old->euid)  ||  in __sys_setfsuid()
818 	    uid_eq(kuid, old->suid) || uid_eq(kuid, old->fsuid) ||  in __sys_setfsuid()
819 	    ns_capable_setid(old->user_ns, CAP_SETUID)) {  in __sys_setfsuid()
820 		if (!uid_eq(kuid, old->fsuid)) {  in __sys_setfsuid()
822 			if (security_task_fix_setuid(new, old, LSM_SETID_FS) == 0)  in __sys_setfsuid()
845 	const struct cred *old;  in __sys_setfsgid()  local
850 	old = current_cred();  in __sys_setfsgid()
851 	old_fsgid = from_kgid_munged(old->user_ns, old->fsgid);  in __sys_setfsgid()
853 	kgid = make_kgid(old->user_ns, gid);  in __sys_setfsgid()
861 	if (gid_eq(kgid, old->gid)  || gid_eq(kgid, old->egid)  ||  in __sys_setfsgid()
862 	    gid_eq(kgid, old->sgid) || gid_eq(kgid, old->fsgid) ||  in __sys_setfsgid()
863 	    ns_capable(old->user_ns, CAP_SETGID)) {  in __sys_setfsgid()
864 		if (!gid_eq(kgid, old->fsgid)) {  in __sys_setfsgid()
1613 	struct rlimit old, new;  in SYSCALL_DEFINE4()  local
1643 			old_rlim ? &old : NULL);  in SYSCALL_DEFINE4()
1646 		rlim_to_rlim64(&old, &old64);  in SYSCALL_DEFINE4()