SYSCAP_RESTRICTEDROOT
if (__KP_SYSCAP_GET(KI_PROC(k, syscaps), SYSCAP_RESTRICTEDROOT) ==
if (__KP_SYSCAP_GET(KI_PROC(k, syscaps), SYSCAP_RESTRICTEDROOT) ==
if (caps_priv_check_self(SYSCAP_RESTRICTEDROOT))
if (caps_priv_check_self(SYSCAP_RESTRICTEDROOT))
if (caps_priv_check_self(SYSCAP_RESTRICTEDROOT))
if (caps_priv_check_self(SYSCAP_RESTRICTEDROOT))
if (caps_priv_check_self(SYSCAP_RESTRICTEDROOT))
if (caps_priv_check_self(SYSCAP_RESTRICTEDROOT))
if (caps_priv_check_self(SYSCAP_RESTRICTEDROOT))
if (caps_priv_check_self(SYSCAP_RESTRICTEDROOT))
if (caps_priv_check_self(SYSCAP_RESTRICTEDROOT))
if (caps_priv_check_self(SYSCAP_RESTRICTEDROOT))
SYSCAP_RESTRICTEDROOT);
if (caps_priv_check(ap->a_cred, SYSCAP_RESTRICTEDROOT))
error = caps_priv_check(ap->a_cred, SYSCAP_RESTRICTEDROOT);
error = caps_priv_check(ap->a_cred, SYSCAP_RESTRICTEDROOT);
#define CAP_SYS_ADMIN SYSCAP_RESTRICTEDROOT
caps_priv_check(ap->a_cred, SYSCAP_RESTRICTEDROOT))
if (caps_priv_check_self(SYSCAP_RESTRICTEDROOT))
if (caps_priv_check_self(SYSCAP_RESTRICTEDROOT))
caps_priv_check(ap->a_cred, SYSCAP_RESTRICTEDROOT))
error = caps_priv_check(ap->a_cred, SYSCAP_RESTRICTEDROOT);
if (caps_priv_check(ap->a_cred, SYSCAP_RESTRICTEDROOT | __SYSCAP_NOROOTTEST))
caps_priv_check(ap->a_cred, SYSCAP_RESTRICTEDROOT))
rc = caps_priv_check(cr, SYSCAP_RESTRICTEDROOT |
error = caps_priv_check(cr, SYSCAP_RESTRICTEDROOT |
error = caps_priv_check(cr, SYSCAP_RESTRICTEDROOT |
error = caps_priv_check(cr, SYSCAP_RESTRICTEDROOT |
error = caps_priv_check(ap->a_cred, SYSCAP_RESTRICTEDROOT);
error = caps_priv_check(ap->a_cred, SYSCAP_RESTRICTEDROOT);
caps_priv_check(ap->a_cred, SYSCAP_RESTRICTEDROOT))
SYSCAP_RESTRICTEDROOT);
error = caps_priv_check(ap->a_cred, SYSCAP_RESTRICTEDROOT);
root_error = caps_priv_check_self(SYSCAP_RESTRICTEDROOT);
caps_priv_check_td(td, SYSCAP_RESTRICTEDROOT) != 0)
caps_set_locked(p, SYSCAP_RESTRICTEDROOT, __SYSCAP_ALL);
case SYSCAP_RESTRICTEDROOT: /* meta group 1 */
error = caps_priv_check(ap->a_cred, SYSCAP_RESTRICTEDROOT |
SYSCAP_RESTRICTEDROOT |
error = caps_priv_check(ap->a_cred, SYSCAP_RESTRICTEDROOT);
if ((error = caps_priv_check(cred, SYSCAP_RESTRICTEDROOT)) != 0)
if ((error = caps_priv_check(cred, SYSCAP_RESTRICTEDROOT)) != 0)
if ((error = caps_priv_check(cred, SYSCAP_RESTRICTEDROOT)) != 0)
if ((caps_get(cr1, SYSCAP_RESTRICTEDROOT) & __SYSCAP_SELF) &&
(caps_get(cr2, SYSCAP_RESTRICTEDROOT) & __SYSCAP_SELF) == 0)
if ((error = caps_priv_check_self(SYSCAP_RESTRICTEDROOT)) != 0)
if (caps_priv_check_self(SYSCAP_RESTRICTEDROOT))
if (caps_priv_check_self(SYSCAP_RESTRICTEDROOT))
if (caps_priv_check_self(SYSCAP_RESTRICTEDROOT))
if (caps_priv_check_self(SYSCAP_RESTRICTEDROOT))
if (caps_priv_check_self(SYSCAP_RESTRICTEDROOT))
if (caps_priv_check_self(SYSCAP_RESTRICTEDROOT))
if (caps_priv_check_self(SYSCAP_RESTRICTEDROOT))
caps_priv_check_td(req->td, SYSCAP_RESTRICTEDROOT) != 0)
caps_priv_check_td(td, SYSCAP_RESTRICTEDROOT) != 0)
SYSCAP_RESTRICTEDROOT);
if (caps_priv_check(cred, SYSCAP_RESTRICTEDROOT))
caps_priv_check(cred, SYSCAP_RESTRICTEDROOT) == 0) ?
eval = caps_priv_check_td(td, SYSCAP_RESTRICTEDROOT);
caps_priv_check_td(td, SYSCAP_RESTRICTEDROOT))
caps_priv_check_td(td, SYSCAP_RESTRICTEDROOT))
error = caps_priv_check_td(td, SYSCAP_RESTRICTEDROOT);
error = caps_priv_check_td(td, SYSCAP_RESTRICTEDROOT);
if (caps_priv_check_self(SYSCAP_RESTRICTEDROOT))
SYSCAP_RESTRICTEDROOT);
caps_priv_check(ap->a_cred, SYSCAP_RESTRICTEDROOT))
if (caps_priv_check(cred, SYSCAP_RESTRICTEDROOT) == 0) {
(error = caps_priv_check_td(td, SYSCAP_RESTRICTEDROOT)) != 0)
if (caps_priv_check_td(td, SYSCAP_RESTRICTEDROOT))
if (caps_priv_check_td(td, SYSCAP_RESTRICTEDROOT))
error = caps_priv_check_td(td, SYSCAP_RESTRICTEDROOT);
if ((error = caps_priv_check_self(SYSCAP_RESTRICTEDROOT)) != 0)
error = caps_priv_check_td(td, SYSCAP_RESTRICTEDROOT);
error = caps_priv_check_td(td, SYSCAP_RESTRICTEDROOT);
error = caps_priv_check_td(td, SYSCAP_RESTRICTEDROOT);
if (caps_priv_check_td(td, SYSCAP_RESTRICTEDROOT)) {
if ((error = caps_priv_check_td(td, SYSCAP_RESTRICTEDROOT)))
return SYSCAP_RESTRICTEDROOT;
error = caps_priv_check(cr, SYSCAP_RESTRICTEDROOT |
error = caps_priv_check(cr, SYSCAP_RESTRICTEDROOT |
error = caps_priv_check(cr, SYSCAP_RESTRICTEDROOT |
error = caps_priv_check(cr, SYSCAP_RESTRICTEDROOT |
error = caps_priv_check(cr, SYSCAP_RESTRICTEDROOT |
error = caps_priv_check(cr, SYSCAP_RESTRICTEDROOT |
error = caps_priv_check(cr, SYSCAP_RESTRICTEDROOT |
error = caps_priv_check(cr, SYSCAP_RESTRICTEDROOT |
error = caps_priv_check(cr, SYSCAP_RESTRICTEDROOT |
error = caps_priv_check(cred, SYSCAP_RESTRICTEDROOT);
error = caps_priv_check(cred, SYSCAP_RESTRICTEDROOT);
error = caps_priv_check(cred, SYSCAP_RESTRICTEDROOT);
error = caps_priv_check(cred, SYSCAP_RESTRICTEDROOT);
error = caps_priv_check(cred, SYSCAP_RESTRICTEDROOT);
error = caps_priv_check(cred, SYSCAP_RESTRICTEDROOT);
error = caps_priv_check(cred, SYSCAP_RESTRICTEDROOT);
error = caps_priv_check(cred, SYSCAP_RESTRICTEDROOT);
error = caps_priv_check(cred, SYSCAP_RESTRICTEDROOT);
error = caps_priv_check(cred, SYSCAP_RESTRICTEDROOT);
error = caps_priv_check(cred, SYSCAP_RESTRICTEDROOT);
error = caps_priv_check(cred, SYSCAP_RESTRICTEDROOT);
error = caps_priv_check(cred, SYSCAP_RESTRICTEDROOT);
error = caps_priv_check(cr, SYSCAP_RESTRICTEDROOT |
error = caps_priv_check(ai->p_ucred, SYSCAP_RESTRICTEDROOT |
caps_priv_check(so->so_cred, SYSCAP_RESTRICTEDROOT) != 0)
error = caps_priv_check_self(SYSCAP_RESTRICTEDROOT);
(error = caps_priv_check(ap->a_cred, SYSCAP_RESTRICTEDROOT)) != 0)
if ((error = caps_priv_check(ap->a_cred, SYSCAP_RESTRICTEDROOT)) != 0)
ret = caps_priv_check(cred, SYSCAP_RESTRICTEDROOT);
err = caps_priv_check_self(SYSCAP_RESTRICTEDROOT);
err = caps_priv_check_self(SYSCAP_RESTRICTEDROOT);
err = caps_priv_check_self(SYSCAP_RESTRICTEDROOT);
err = caps_priv_check_self(SYSCAP_RESTRICTEDROOT);
err = caps_priv_check_self(SYSCAP_RESTRICTEDROOT);
if (curproc == NULL || caps_priv_check_self(SYSCAP_RESTRICTEDROOT) == 0)
SYSCAP_RESTRICTEDROOT | __SYSCAP_NULLCRED) != 0)
if ((error = caps_priv_check_self(SYSCAP_RESTRICTEDROOT)))
SYSCAP_RESTRICTEDROOT | __SYSCAP_NULLCRED))
SYSCAP_RESTRICTEDROOT)) != 0)
SYSCAP_RESTRICTEDROOT)) != 0)
SYSCAP_RESTRICTEDROOT)) != 0)
error = caps_priv_check(cr, SYSCAP_RESTRICTEDROOT |
error = caps_priv_check(cr, SYSCAP_RESTRICTEDROOT |
error = caps_priv_check(ai->p_ucred, SYSCAP_RESTRICTEDROOT |
error = caps_priv_check_td(req->td, SYSCAP_RESTRICTEDROOT);
error = caps_priv_check_td(req->td, SYSCAP_RESTRICTEDROOT);
error = caps_priv_check_td(req->td, SYSCAP_RESTRICTEDROOT);
if (caps_priv_check_td(td, SYSCAP_RESTRICTEDROOT) == 0)
error = caps_priv_check_td(td, SYSCAP_RESTRICTEDROOT);
if (caps_priv_check_td(td, SYSCAP_RESTRICTEDROOT) == 0)
caps_priv_check_td(td, SYSCAP_RESTRICTEDROOT)) ?
if (caps_priv_check_self(SYSCAP_RESTRICTEDROOT)) {
if (caps_priv_check_self(SYSCAP_RESTRICTEDROOT)) {
priv = !caps_priv_check_td(td, SYSCAP_RESTRICTEDROOT);
error = caps_priv_check_td(req->td, SYSCAP_RESTRICTEDROOT);
#define smb_suser(cred) caps_priv_check(cred, SYSCAP_RESTRICTEDROOT)
if (caps_priv_check(ucred, SYSCAP_RESTRICTEDROOT) != 0) {
error = caps_priv_check_self(SYSCAP_RESTRICTEDROOT);
error = caps_priv_check_self(SYSCAP_RESTRICTEDROOT);
error = caps_priv_check(cred, SYSCAP_RESTRICTEDROOT);
SYSCAP_RESTRICTEDROOT)))
(error = caps_priv_check(cred, SYSCAP_RESTRICTEDROOT)))
error = caps_priv_check_td(td, SYSCAP_RESTRICTEDROOT);
SYSCAP_RESTRICTEDROOT))) {
error = caps_priv_check(cred, SYSCAP_RESTRICTEDROOT);
error = caps_priv_check(cred, SYSCAP_RESTRICTEDROOT);
error = caps_priv_check_td(td, SYSCAP_RESTRICTEDROOT);
rc = caps_priv_check_td(td, SYSCAP_RESTRICTEDROOT);
error = caps_priv_check_td(td, SYSCAP_RESTRICTEDROOT);
error = caps_priv_check_self(SYSCAP_RESTRICTEDROOT);
error = caps_priv_check_self(SYSCAP_RESTRICTEDROOT);
syscap_set(SYSCAP_RESTRICTEDROOT, __SYSCAP_ALL,