401 	struct selinux_mnt_opts *opts = mnt_opts;  in selinux_free_mnt_opts()  local
402 	kfree(opts->fscontext);  in selinux_free_mnt_opts()
403 	kfree(opts->context);  in selinux_free_mnt_opts()
404 	kfree(opts->rootcontext);  in selinux_free_mnt_opts()
405 	kfree(opts->defcontext);  in selinux_free_mnt_opts()
406 	kfree(opts);  in selinux_free_mnt_opts()
655 	struct selinux_mnt_opts *opts = mnt_opts;  in selinux_set_mnt_opts()  local
664 		if (!opts) {  in selinux_set_mnt_opts()
694 	    && !opts)  in selinux_set_mnt_opts()
704 	if (opts) {  in selinux_set_mnt_opts()
705 		if (opts->fscontext) {  in selinux_set_mnt_opts()
706 			rc = parse_sid(sb, opts->fscontext, &fscontext_sid);  in selinux_set_mnt_opts()
714 		if (opts->context) {  in selinux_set_mnt_opts()
715 			rc = parse_sid(sb, opts->context, &context_sid);  in selinux_set_mnt_opts()
723 		if (opts->rootcontext) {  in selinux_set_mnt_opts()
724 			rc = parse_sid(sb, opts->rootcontext, &rootcontext_sid);  in selinux_set_mnt_opts()
732 		if (opts->defcontext) {  in selinux_set_mnt_opts()
733 			rc = parse_sid(sb, opts->defcontext, &defcontext_sid);  in selinux_set_mnt_opts()
745 		if ((sbsec->flags & SE_MNTMASK) && !opts)  in selinux_set_mnt_opts()
1000 	struct selinux_mnt_opts *opts = *mnt_opts;  in selinux_add_opt()  local
1009 	if (!opts) {  in selinux_add_opt()
1010 		opts = kzalloc(sizeof(struct selinux_mnt_opts), GFP_KERNEL);  in selinux_add_opt()
1011 		if (!opts)  in selinux_add_opt()
1013 		*mnt_opts = opts;  in selinux_add_opt()
1019 		if (opts->context || opts->defcontext)  in selinux_add_opt()
1021 		opts->context = s;  in selinux_add_opt()
1024 		if (opts->fscontext)  in selinux_add_opt()
1026 		opts->fscontext = s;  in selinux_add_opt()
1029 		if (opts->rootcontext)  in selinux_add_opt()
1031 		opts->rootcontext = s;  in selinux_add_opt()
1034 		if (opts->context || opts->defcontext)  in selinux_add_opt()
1036 		opts->defcontext = s;  in selinux_add_opt()
1042 		kfree(opts);  in selinux_add_opt()
1650 			       int cap, unsigned int opts, bool initns)  in cred_has_capability()  argument
1677 	if (!(opts & CAP_OPT_NOAUDIT)) {  in cred_has_capability()
2191 			   int cap, unsigned int opts)  in selinux_capable()  argument
2193 	return cred_has_capability(cred, cap, opts, ns == &init_user_ns);  in selinux_capable()
2699 	struct selinux_mnt_opts *opts = mnt_opts;  in selinux_sb_remount()  local
2707 	if (!opts)  in selinux_sb_remount()
2710 	if (opts->fscontext) {  in selinux_sb_remount()
2711 		rc = parse_sid(sb, opts->fscontext, &sid);  in selinux_sb_remount()
2717 	if (opts->context) {  in selinux_sb_remount()
2718 		rc = parse_sid(sb, opts->context, &sid);  in selinux_sb_remount()
2724 	if (opts->rootcontext) {  in selinux_sb_remount()
2727 		rc = parse_sid(sb, opts->rootcontext, &sid);  in selinux_sb_remount()
2733 	if (opts->defcontext) {  in selinux_sb_remount()
2734 		rc = parse_sid(sb, opts->defcontext, &sid);  in selinux_sb_remount()
2804 	struct selinux_mnt_opts *opts;  in selinux_fs_context_dup()  local
2813 	opts = fc->security;  in selinux_fs_context_dup()
2816 		opts->fscontext = kstrdup(src->fscontext, GFP_KERNEL);  in selinux_fs_context_dup()
2817 		if (!opts->fscontext)  in selinux_fs_context_dup()
2821 		opts->context = kstrdup(src->context, GFP_KERNEL);  in selinux_fs_context_dup()
2822 		if (!opts->context)  in selinux_fs_context_dup()
2826 		opts->rootcontext = kstrdup(src->rootcontext, GFP_KERNEL);  in selinux_fs_context_dup()
2827 		if (!opts->rootcontext)  in selinux_fs_context_dup()
2831 		opts->defcontext = kstrdup(src->defcontext, GFP_KERNEL);  in selinux_fs_context_dup()
2832 		if (!opts->defcontext)  in selinux_fs_context_dup()
3144 	unsigned int opts = audit ? CAP_OPT_NONE : CAP_OPT_NOAUDIT;  in has_cap_mac_admin()  local
3146 	if (cap_capable(cred, &init_user_ns, CAP_MAC_ADMIN, opts))  in has_cap_mac_admin()
3148 	if (cred_has_capability(cred, CAP_MAC_ADMIN, opts, true))  in has_cap_mac_admin()