877 	struct aa_task_ctx *ctx;  in apparmor_bprm_set_creds()  local
892 	ctx = task_ctx(current);  in apparmor_bprm_set_creds()
894 	AA_BUG(!ctx);  in apparmor_bprm_set_creds()
906 	    !ctx->nnp)  in apparmor_bprm_set_creds()
907 		ctx->nnp = aa_get_label(label);  in apparmor_bprm_set_creds()
912 	if (ctx->onexec)  in apparmor_bprm_set_creds()
913 		new = handle_onexec(label, ctx->onexec, ctx->token,  in apparmor_bprm_set_creds()
938 	    !unconfined(label) && !aa_label_is_subset(new, ctx->nnp)) {  in apparmor_bprm_set_creds()
1169 	struct aa_task_ctx *ctx = task_ctx(current);  in aa_change_hat()  local
1179 	previous = aa_get_newest_label(ctx->previous);  in aa_change_hat()
1188 	if (task_no_new_privs(current) && !unconfined(label) && !ctx->nnp)  in aa_change_hat()
1189 		ctx->nnp = aa_get_label(label);  in aa_change_hat()
1216 		    !aa_label_is_subset(new, ctx->nnp)) {  in aa_change_hat()
1237 		    !aa_label_is_subset(previous, ctx->nnp)) {  in aa_change_hat()
1319 	struct aa_task_ctx *ctx = task_ctx(current);  in aa_change_profile()  local
1333 	if (task_no_new_privs(current) && !unconfined(label) && !ctx->nnp)  in aa_change_profile()
1334 		ctx->nnp = aa_get_label(label);  in aa_change_profile()
1433 		    !aa_label_is_subset(new, ctx->nnp)) {  in aa_change_profile()