linux-master/security/commoncap.c

78 		if (ns == cred->user_ns)
85 		if (ns->level <= cred->user_ns->level)
92 		if ((ns->parent == cred->user_ns) && uid_eq(ns->owner, cred->euid))
126  * If we are in the same or an ancestor user_ns and have all the target
128  * If we have the ptrace capability to the target user_ns, then ptrace
148 	if (cred->user_ns == child_cred->user_ns &&
151 	if (ns_capable(child_cred->user_ns, CAP_SYS_PTRACE))
163  * If parent is in the same or an ancestor user_ns and has all current's
165  * If parent has the ptrace capability to current's user_ns, then ptrace
180 	if (cred->user_ns == child_cred->user_ns &&
183 	if (has_ns_capability(parent, child_cred->user_ns, CAP_SYS_PTRACE))
225 	if (cap_capable(current_cred(), current_cred()->user_ns,
902 	root_uid = make_kuid(new->user_ns, 0);
919 	     !ptracer_capable(current, new->user_ns))) {
921 		if (!ns_capable(new->user_ns, CAP_SETUID) ||
993 	struct user_namespace *user_ns = dentry->d_sb->s_user_ns;
1007 	if (!ns_capable(user_ns, CAP_SYS_ADMIN))
1034 	struct user_namespace *user_ns = dentry->d_sb->s_user_ns;
1051 	if (!ns_capable(user_ns, CAP_SYS_ADMIN))
1087 	kuid_t root_uid = make_kuid(old->user_ns, 0);
1144 			kuid_t root_uid = make_kuid(old->user_ns, 0);
1180 	if (!is_subset && !ns_capable(__task_cred(p)->user_ns, CAP_SYS_NICE))
1306 				    current_cred()->user_ns,