253 	const struct cred *old;  in prepare_creds()  local
264 	old = task->cred;  in prepare_creds()
265 	memcpy(new, old, sizeof(struct cred));  in prepare_creds()
285 	if (security_prepare_creds(new, old, GFP_KERNEL_ACCOUNT) < 0)  in prepare_creds()
428  * the old set.  Both the objective and the subjective credentials pointers are
440 	const struct cred *old = task->real_cred;  in commit_creds()  local
446 	BUG_ON(task->cred != old);  in commit_creds()
448 	BUG_ON(read_cred_subscribers(old) < 2);  in commit_creds()
449 	validate_creds(old);  in commit_creds()
457 	if (!uid_eq(old->euid, new->euid) ||  in commit_creds()
458 	    !gid_eq(old->egid, new->egid) ||  in commit_creds()
459 	    !uid_eq(old->fsuid, new->fsuid) ||  in commit_creds()
460 	    !gid_eq(old->fsgid, new->fsgid) ||  in commit_creds()
461 	    !cred_cap_issubset(old, new)) {  in commit_creds()
478 	if (!uid_eq(new->fsuid, old->fsuid))  in commit_creds()
480 	if (!gid_eq(new->fsgid, old->fsgid))  in commit_creds()
488 	if (new->user != old->user)  in commit_creds()
492 	if (new->user != old->user)  in commit_creds()
493 		atomic_dec(&old->user->processes);  in commit_creds()
494 	alter_cred_subscribers(old, -2);  in commit_creds()
497 	if (!uid_eq(new->uid,   old->uid)  ||  in commit_creds()
498 	    !uid_eq(new->euid,  old->euid) ||  in commit_creds()
499 	    !uid_eq(new->suid,  old->suid) ||  in commit_creds()
500 	    !uid_eq(new->fsuid, old->fsuid))  in commit_creds()
503 	if (!gid_eq(new->gid,   old->gid)  ||  in commit_creds()
504 	    !gid_eq(new->egid,  old->egid) ||  in commit_creds()
505 	    !gid_eq(new->sgid,  old->sgid) ||  in commit_creds()
506 	    !gid_eq(new->fsgid, old->fsgid))  in commit_creds()
509 	/* release the old obj and subj refs both */  in commit_creds()
510 	put_cred(old);  in commit_creds()
511 	put_cred(old);  in commit_creds()
542  * process, returning the old set for later reversion.
546 	const struct cred *old = current->cred;  in override_creds()  local
552 	validate_creds(old);  in override_creds()
569 	alter_cred_subscribers(old, -1);  in override_creds()
571 	kdebug("override_creds() = %p{%d,%d}", old,  in override_creds()
572 	       atomic_read(&old->usage),  in override_creds()
573 	       read_cred_subscribers(old));  in override_creds()
574 	return old;  in override_creds()
580  * @old: The credentials to be restored
582  * Revert a temporary set of override subjective credentials to an old set,
585 void revert_creds(const struct cred *old)  in revert_creds()  argument
589 	kdebug("revert_creds(%p{%d,%d})", old,  in revert_creds()
590 	       atomic_read(&old->usage),  in revert_creds()
591 	       read_cred_subscribers(old));  in revert_creds()
593 	validate_creds(old);  in revert_creds()
595 	alter_cred_subscribers(old, 1);  in revert_creds()
596 	rcu_assign_pointer(current->cred, old);  in revert_creds()
684 	const struct cred *old;  in prepare_kernel_cred()  local
694 		old = get_task_cred(daemon);  in prepare_kernel_cred()
696 		old = get_cred(&init_cred);  in prepare_kernel_cred()
698 	validate_creds(old);  in prepare_kernel_cred()
700 	*new = *old;  in prepare_kernel_cred()
719 	if (security_prepare_creds(new, old, GFP_KERNEL_ACCOUNT) < 0)  in prepare_kernel_cred()
722 	put_cred(old);  in prepare_kernel_cred()
728 	put_cred(old);  in prepare_kernel_cred()