366 	struct selinux_mnt_opts *opts = mnt_opts;  in selinux_free_mnt_opts()  local
367 	kfree(opts->fscontext);  in selinux_free_mnt_opts()
368 	kfree(opts->context);  in selinux_free_mnt_opts()
369 	kfree(opts->rootcontext);  in selinux_free_mnt_opts()
370 	kfree(opts->defcontext);  in selinux_free_mnt_opts()
371 	kfree(opts);  in selinux_free_mnt_opts()
641 	struct selinux_mnt_opts *opts = mnt_opts;  in selinux_set_mnt_opts()  local
650 		if (!opts) {  in selinux_set_mnt_opts()
680 	    && !opts)  in selinux_set_mnt_opts()
690 	if (opts) {  in selinux_set_mnt_opts()
691 		if (opts->fscontext) {  in selinux_set_mnt_opts()
692 			rc = parse_sid(sb, opts->fscontext, &fscontext_sid);  in selinux_set_mnt_opts()
700 		if (opts->context) {  in selinux_set_mnt_opts()
701 			rc = parse_sid(sb, opts->context, &context_sid);  in selinux_set_mnt_opts()
709 		if (opts->rootcontext) {  in selinux_set_mnt_opts()
710 			rc = parse_sid(sb, opts->rootcontext, &rootcontext_sid);  in selinux_set_mnt_opts()
718 		if (opts->defcontext) {  in selinux_set_mnt_opts()
719 			rc = parse_sid(sb, opts->defcontext, &defcontext_sid);  in selinux_set_mnt_opts()
731 		if ((sbsec->flags & SE_MNTMASK) && !opts)  in selinux_set_mnt_opts()
988 	struct selinux_mnt_opts *opts = *mnt_opts;  in selinux_add_opt()  local
997 	if (!opts) {  in selinux_add_opt()
998 		opts = kzalloc(sizeof(struct selinux_mnt_opts), GFP_KERNEL);  in selinux_add_opt()
999 		if (!opts)  in selinux_add_opt()
1001 		*mnt_opts = opts;  in selinux_add_opt()
1007 		if (opts->context || opts->defcontext)  in selinux_add_opt()
1009 		opts->context = s;  in selinux_add_opt()
1011 			parse_sid(NULL, s, &opts->context_sid);  in selinux_add_opt()
1014 		if (opts->fscontext)  in selinux_add_opt()
1016 		opts->fscontext = s;  in selinux_add_opt()
1018 			parse_sid(NULL, s, &opts->fscontext_sid);  in selinux_add_opt()
1021 		if (opts->rootcontext)  in selinux_add_opt()
1023 		opts->rootcontext = s;  in selinux_add_opt()
1025 			parse_sid(NULL, s, &opts->rootcontext_sid);  in selinux_add_opt()
1028 		if (opts->context || opts->defcontext)  in selinux_add_opt()
1030 		opts->defcontext = s;  in selinux_add_opt()
1032 			parse_sid(NULL, s, &opts->defcontext_sid);  in selinux_add_opt()
1038 		kfree(opts);  in selinux_add_opt()
1649 			       int cap, unsigned int opts, bool initns)  in cred_has_capability()  argument
1676 	if (!(opts & CAP_OPT_NOAUDIT)) {  in cred_has_capability()
2191 			   int cap, unsigned int opts)  in selinux_capable()  argument
2193 	return cred_has_capability(cred, cap, opts, ns == &init_user_ns);  in selinux_capable()
2704 	struct selinux_mnt_opts *opts = mnt_opts;  in selinux_sb_mnt_opts_compat()  local
2712 		return opts ? 1 : 0;  in selinux_sb_mnt_opts_compat()
2718 	if (!opts)  in selinux_sb_mnt_opts_compat()
2721 	if (opts->fscontext) {  in selinux_sb_mnt_opts_compat()
2722 		if (opts->fscontext_sid == SECSID_NULL)  in selinux_sb_mnt_opts_compat()
2725 				       opts->fscontext_sid))  in selinux_sb_mnt_opts_compat()
2728 	if (opts->context) {  in selinux_sb_mnt_opts_compat()
2729 		if (opts->context_sid == SECSID_NULL)  in selinux_sb_mnt_opts_compat()
2732 				       opts->context_sid))  in selinux_sb_mnt_opts_compat()
2735 	if (opts->rootcontext) {  in selinux_sb_mnt_opts_compat()
2736 		if (opts->rootcontext_sid == SECSID_NULL)  in selinux_sb_mnt_opts_compat()
2743 				       opts->rootcontext_sid))  in selinux_sb_mnt_opts_compat()
2747 	if (opts->defcontext) {  in selinux_sb_mnt_opts_compat()
2748 		if (opts->defcontext_sid == SECSID_NULL)  in selinux_sb_mnt_opts_compat()
2751 				       opts->defcontext_sid))  in selinux_sb_mnt_opts_compat()
2759 	struct selinux_mnt_opts *opts = mnt_opts;  in selinux_sb_remount()  local
2767 	if (!opts)  in selinux_sb_remount()
2770 	if (opts->fscontext) {  in selinux_sb_remount()
2771 		rc = parse_sid(sb, opts->fscontext, &sid);  in selinux_sb_remount()
2777 	if (opts->context) {  in selinux_sb_remount()
2778 		rc = parse_sid(sb, opts->context, &sid);  in selinux_sb_remount()
2784 	if (opts->rootcontext) {  in selinux_sb_remount()
2787 		rc = parse_sid(sb, opts->rootcontext, &sid);  in selinux_sb_remount()
2793 	if (opts->defcontext) {  in selinux_sb_remount()
2794 		rc = parse_sid(sb, opts->defcontext, &sid);  in selinux_sb_remount()
2864 	struct selinux_mnt_opts *opts;  in selinux_fs_context_dup()  local
2873 	opts = fc->security;  in selinux_fs_context_dup()
2876 		opts->fscontext = kstrdup(src->fscontext, GFP_KERNEL);  in selinux_fs_context_dup()
2877 		if (!opts->fscontext)  in selinux_fs_context_dup()
2881 		opts->context = kstrdup(src->context, GFP_KERNEL);  in selinux_fs_context_dup()
2882 		if (!opts->context)  in selinux_fs_context_dup()
2886 		opts->rootcontext = kstrdup(src->rootcontext, GFP_KERNEL);  in selinux_fs_context_dup()
2887 		if (!opts->rootcontext)  in selinux_fs_context_dup()
2891 		opts->defcontext = kstrdup(src->defcontext, GFP_KERNEL);  in selinux_fs_context_dup()
2892 		if (!opts->defcontext)  in selinux_fs_context_dup()
3256 	unsigned int opts = audit ? CAP_OPT_NONE : CAP_OPT_NOAUDIT;  in has_cap_mac_admin()  local
3258 	if (cap_capable(cred, &init_user_ns, CAP_MAC_ADMIN, opts))  in has_cap_mac_admin()
3260 	if (cred_has_capability(cred, CAP_MAC_ADMIN, opts, true))  in has_cap_mac_admin()