bsd/kern/kern_authorization.c

618 	int applies, error, i, gotguid;
667 		 * Determine whether this entry applies to the current request.  This
687 		 * Verify whether this entry applies to the credential.
692 			applies = eval->ae_options & KAUTH_AEVAL_IS_OWNER;
696 				applies = ((ace->ace_flags & KAUTH_ACE_KINDMASK) == KAUTH_ACE_DENY);
698 				applies = eval->ae_options & KAUTH_AEVAL_IN_GROUP;
702 			applies = 1;
705 			applies = 0;
710 			applies = !gotguid ? 0 : kauth_guid_equal(&guid, &ace->ace_applicable);
712 			    K_UUID_ARG(ace->ace_applicable), K_UUID_ARG(guid), applies ? "" : "not ");
714 			if (!applies) {
715 				error = !gotguid ? ENOENT : kauth_cred_ismember_guid(cred, &ace->ace_applicable, &applies);
726 						applies = 0;
729 						applies = 1;
733 					KAUTH_DEBUG("    ACL - %s group member", applies ? "is" : "not");
739 		if (!applies)