LSM_SETID_RES
retval = security_task_fix_setuid(new, old, LSM_SETID_RES);
retval = security_task_fix_setgid(new, old, LSM_SETID_RES);
case LSM_SETID_RES: