bsd/kern/kern_credential.c

1828 	if (displaced && !(pcred->cr_flags & CRF_NOMEMBERD) &&
3531 	if (pcred->cr_flags & CRF_NOMEMBERD) {
3563 			pcred->cr_flags |= CRF_NOMEMBERD;
3605 			new_pcred->cr_flags = pcred->cr_flags;
3702 		temp_pcred->cr_flags |= CRF_NOMEMBERD;
3765 			temp_pcred->cr_flags |= CRF_NOMEMBERD;
3861 	 * update the cr_flags, since clearing it is sticky.  This permits an
3870 		temp_pcred->cr_flags |= CRF_NOMEMBERD;
3872 		temp_pcred->cr_flags &= ~CRF_NOMEMBERD;
3971 	temp_pcred->cr_flags = pcred->cr_flags;
3973 	if (pcred->cr_flags & CRF_NOMEMBERD) {
3975 		temp_pcred->cr_flags |= CRF_NOMEMBERD;
3978 		temp_pcred->cr_flags &= ~CRF_NOMEMBERD;
3984 		temp_pcred->cr_flags |= CRF_NOMEMBERD;
4224 			DEBUG_CRED_CHANGE("kauth_proc_setlabel_unlocked CH(%d): %p/0x%08x -> %p/0x%08x\n", p->p_pid, my_cred, my_cred->cr_flags, my_new_cred, my_new_cred->cr_flags);
4302 			DEBUG_CRED_CHANGE("kauth_proc_label_update_execve_unlocked CH(%d): %p/0x%08x -> %p/0x%08x\n", p->p_pid, my_cred, my_cred->cr_flags, my_new_cred, my_new_cred->cr_flags);
4655 		temp_pcred->cr_flags |= CRF_NOMEMBERD;
4953 		if (((found_pcred->cr_flags & CRF_MAC_ENFORCE) != 0) ||
4954 		    ((pcred->cr_flags & CRF_MAC_ENFORCE) != 0)) {
5030 	if (pcred->cr_flags & CRF_MAC_ENFORCE) {
5097 	printf("%p - refs %lu flags 0x%08x uids e%d r%d sv%d gm%d ", cred, cred->cr_ref, cred->cr_flags, cred->cr_uid, cred->cr_ruid, cred->cr_svuid, cred->cr_gmuid);
5165 	if ( the_cred->cr_flags != 0 )
5219 	int		cr_flags;			/* flags on credential */
5303 			nextp->cr_flags = found_cred->cr_flags;