security/keys/keyring.c

424 	if (keyring->restrict_link) {
425 		struct key_restriction *keyres = keyring->restrict_link;
520 			  struct key_restriction *restrict_link,
527 			    uid, gid, cred, perm, flags, restrict_link);
552  * in the restrict_link parameter to keyring_alloc().
1005 		keyres = keyres->key->restrict_link;
1026 	struct key_restriction *restrict_link;
1036 		restrict_link = keyring_restriction_alloc(restrict_link_reject);
1048 		restrict_link = restrict_type->lookup_restriction(restriction);
1051 	if (IS_ERR(restrict_link)) {
1052 		ret = PTR_ERR(restrict_link);
1059 	if (keyring->restrict_link) {
1061 	} else if (keyring_detect_restriction_cycle(keyring, restrict_link)) {
1064 		keyring->restrict_link = restrict_link;
1072 		key_put(restrict_link->key);
1073 		kfree(restrict_link);
1409 	if (!keyring->restrict_link || !keyring->restrict_link->check)
1411 	return keyring->restrict_link->check(keyring, key->type, &key->payload,
1412 					     keyring->restrict_link->key);
1768 	 * keyring->restrict_link is only assigned at key allocation time
1770 	 * concurrently assigned to keyring->restrict_link are for key
1774 	if (!dead_type || !keyring->restrict_link ||
1775 	    keyring->restrict_link->keytype != dead_type) {
1783 	keyres = keyring->restrict_link;