854 	struct mac_mls *subj, *obj;  in mls_cred_check_visible()  local
860 	obj = SLOT(cr2->cr_label);  in mls_cred_check_visible()
863 	if (!mls_dominate_effective(subj, obj))  in mls_cred_check_visible()
1079 	struct mac_mls *subj, *obj;  in mls_inpcb_check_visible()  local
1085 	obj = SLOT(inplabel);  in mls_inpcb_check_visible()
1087 	if (!mls_dominate_effective(subj, obj))  in mls_inpcb_check_visible()
1225 	struct mac_mls *subj, *obj;  in mls_mount_check_stat()  local
1231 	obj = SLOT(mntlabel);  in mls_mount_check_stat()
1233 	if (!mls_dominate_effective(subj, obj))  in mls_mount_check_stat()
1347 	struct mac_mls *subj, *obj;  in mls_pipe_check_poll()  local
1353 	obj = SLOT(pplabel);  in mls_pipe_check_poll()
1355 	if (!mls_dominate_effective(subj, obj))  in mls_pipe_check_poll()
1365 	struct mac_mls *subj, *obj;  in mls_pipe_check_read()  local
1371 	obj = SLOT(pplabel);  in mls_pipe_check_read()
1373 	if (!mls_dominate_effective(subj, obj))  in mls_pipe_check_read()
1383 	struct mac_mls *subj, *obj, *new;  in mls_pipe_check_relabel()  local
1388 	obj = SLOT(pplabel);  in mls_pipe_check_relabel()
1402 	if (!mls_effective_in_range(obj, subj))  in mls_pipe_check_relabel()
1434 	struct mac_mls *subj, *obj;  in mls_pipe_check_stat()  local
1440 	obj = SLOT(pplabel);  in mls_pipe_check_stat()
1442 	if (!mls_dominate_effective(subj, obj))  in mls_pipe_check_stat()
1452 	struct mac_mls *subj, *obj;  in mls_pipe_check_write()  local
1458 	obj = SLOT(pplabel);  in mls_pipe_check_write()
1460 	if (!mls_dominate_effective(obj, subj))  in mls_pipe_check_write()
1494 	struct mac_mls *subj, *obj;  in mls_posixsem_check_openunlink()  local
1500 	obj = SLOT(kslabel);  in mls_posixsem_check_openunlink()
1502 	if (!mls_dominate_effective(obj, subj))  in mls_posixsem_check_openunlink()
1512 	struct mac_mls *subj, *obj;  in mls_posixsem_check_rdonly()  local
1518 	obj = SLOT(kslabel);  in mls_posixsem_check_rdonly()
1520 	if (!mls_dominate_effective(subj, obj))  in mls_posixsem_check_rdonly()
1530 	struct mac_mls *subj, *obj;  in mls_posixsem_check_setmode()  local
1536 	obj = SLOT(shmlabel);  in mls_posixsem_check_setmode()
1538 	if (!mls_dominate_effective(obj, subj))  in mls_posixsem_check_setmode()
1548 	struct mac_mls *subj, *obj;  in mls_posixsem_check_setowner()  local
1554 	obj = SLOT(shmlabel);  in mls_posixsem_check_setowner()
1556 	if (!mls_dominate_effective(obj, subj))  in mls_posixsem_check_setowner()
1566 	struct mac_mls *subj, *obj;  in mls_posixsem_check_write()  local
1572 	obj = SLOT(kslabel);  in mls_posixsem_check_write()
1574 	if (!mls_dominate_effective(obj, subj))  in mls_posixsem_check_write()
1596 	struct mac_mls *subj, *obj;  in mls_posixshm_check_mmap()  local
1602 	obj = SLOT(shmlabel);  in mls_posixshm_check_mmap()
1605 		if (!mls_dominate_effective(subj, obj))  in mls_posixshm_check_mmap()
1609 		if (!mls_dominate_effective(obj, subj))  in mls_posixshm_check_mmap()
1620 	struct mac_mls *subj, *obj;  in mls_posixshm_check_open()  local
1626 	obj = SLOT(shmlabel);  in mls_posixshm_check_open()
1629 		if (!mls_dominate_effective(subj, obj))  in mls_posixshm_check_open()
1633 		if (!mls_dominate_effective(obj, subj))  in mls_posixshm_check_open()
1644 	struct mac_mls *subj, *obj;  in mls_posixshm_check_read()  local
1650 	obj = SLOT(shmlabel);  in mls_posixshm_check_read()
1652 	if (!mls_dominate_effective(subj, obj))  in mls_posixshm_check_read()
1662 	struct mac_mls *subj, *obj;  in mls_posixshm_check_setmode()  local
1668 	obj = SLOT(shmlabel);  in mls_posixshm_check_setmode()
1670 	if (!mls_dominate_effective(obj, subj))  in mls_posixshm_check_setmode()
1680 	struct mac_mls *subj, *obj;  in mls_posixshm_check_setowner()  local
1686 	obj = SLOT(shmlabel);  in mls_posixshm_check_setowner()
1688 	if (!mls_dominate_effective(obj, subj))  in mls_posixshm_check_setowner()
1698 	struct mac_mls *subj, *obj;  in mls_posixshm_check_stat()  local
1704 	obj = SLOT(shmlabel);  in mls_posixshm_check_stat()
1706 	if (!mls_dominate_effective(subj, obj))  in mls_posixshm_check_stat()
1716 	struct mac_mls *subj, *obj;  in mls_posixshm_check_truncate()  local
1722 	obj = SLOT(shmlabel);  in mls_posixshm_check_truncate()
1724 	if (!mls_dominate_effective(obj, subj))  in mls_posixshm_check_truncate()
1734 	struct mac_mls *subj, *obj;  in mls_posixshm_check_unlink()  local
1740 	obj = SLOT(shmlabel);  in mls_posixshm_check_unlink()
1742 	if (!mls_dominate_effective(obj, subj))  in mls_posixshm_check_unlink()
1752 	struct mac_mls *subj, *obj;  in mls_posixshm_check_write()  local
1758 	obj = SLOT(shmlabel);  in mls_posixshm_check_write()
1760 	if (!mls_dominate_effective(subj, obj))  in mls_posixshm_check_write()
1781 	struct mac_mls *subj, *obj;  in mls_proc_check_debug()  local
1787 	obj = SLOT(p->p_ucred->cr_label);  in mls_proc_check_debug()
1790 	if (!mls_dominate_effective(subj, obj))  in mls_proc_check_debug()
1792 	if (!mls_dominate_effective(obj, subj))  in mls_proc_check_debug()
1801 	struct mac_mls *subj, *obj;  in mls_proc_check_sched()  local
1807 	obj = SLOT(p->p_ucred->cr_label);  in mls_proc_check_sched()
1810 	if (!mls_dominate_effective(subj, obj))  in mls_proc_check_sched()
1812 	if (!mls_dominate_effective(obj, subj))  in mls_proc_check_sched()
1821 	struct mac_mls *subj, *obj;  in mls_proc_check_signal()  local
1827 	obj = SLOT(p->p_ucred->cr_label);  in mls_proc_check_signal()
1830 	if (!mls_dominate_effective(subj, obj))  in mls_proc_check_signal()
1832 	if (!mls_dominate_effective(obj, subj))  in mls_proc_check_signal()
1862 	struct mac_mls *subj, *obj, *new;  in mls_socket_check_relabel()  local
1869 	obj = SLOT(solabel);  in mls_socket_check_relabel()
1883 	if (!mls_effective_in_range(obj, subj))  in mls_socket_check_relabel()
1915 	struct mac_mls *subj, *obj;  in mls_socket_check_visible()  local
1921 	obj = SLOT(solabel);  in mls_socket_check_visible()
1924 	if (!mls_dominate_effective(subj, obj)) {  in mls_socket_check_visible()
2049 	struct mac_mls *subj, *obj;  in mls_system_check_acct()  local
2058 	obj = SLOT(vplabel);  in mls_system_check_acct()
2060 	if (!mls_dominate_effective(obj, subj) ||  in mls_system_check_acct()
2061 	    !mls_dominate_effective(subj, obj))  in mls_system_check_acct()
2071 	struct mac_mls *subj, *obj;  in mls_system_check_auditctl()  local
2077 	obj = SLOT(vplabel);  in mls_system_check_auditctl()
2079 	if (!mls_dominate_effective(obj, subj) ||  in mls_system_check_auditctl()
2080 	    !mls_dominate_effective(subj, obj))  in mls_system_check_auditctl()
2090 	struct mac_mls *subj, *obj;  in mls_system_check_swapon()  local
2096 	obj = SLOT(vplabel);  in mls_system_check_swapon()
2098 	if (!mls_dominate_effective(obj, subj) ||  in mls_system_check_swapon()
2099 	    !mls_dominate_effective(subj, obj))  in mls_system_check_swapon()
2129 	struct mac_mls *subj, *obj;  in mls_sysvmsq_check_msgrcv()  local
2135 	obj = SLOT(msglabel);  in mls_sysvmsq_check_msgrcv()
2137 	if (!mls_dominate_effective(subj, obj))  in mls_sysvmsq_check_msgrcv()
2147 	struct mac_mls *subj, *obj;  in mls_sysvmsq_check_msgrmid()  local
2153 	obj = SLOT(msglabel);  in mls_sysvmsq_check_msgrmid()
2155 	if (!mls_dominate_effective(obj, subj))  in mls_sysvmsq_check_msgrmid()
2165 	struct mac_mls *subj, *obj;  in mls_sysvmsq_check_msqget()  local
2171 	obj = SLOT(msqklabel);  in mls_sysvmsq_check_msqget()
2173 	if (!mls_dominate_effective(subj, obj))  in mls_sysvmsq_check_msqget()
2183 	struct mac_mls *subj, *obj;  in mls_sysvmsq_check_msqsnd()  local
2189 	obj = SLOT(msqklabel);  in mls_sysvmsq_check_msqsnd()
2191 	if (!mls_dominate_effective(obj, subj))  in mls_sysvmsq_check_msqsnd()
2201 	struct mac_mls *subj, *obj;  in mls_sysvmsq_check_msqrcv()  local
2207 	obj = SLOT(msqklabel);  in mls_sysvmsq_check_msqrcv()
2209 	if (!mls_dominate_effective(subj, obj))  in mls_sysvmsq_check_msqrcv()
2219 	struct mac_mls *subj, *obj;  in mls_sysvmsq_check_msqctl()  local
2225 	obj = SLOT(msqklabel);  in mls_sysvmsq_check_msqctl()
2230 		if (!mls_dominate_effective(obj, subj))  in mls_sysvmsq_check_msqctl()
2235 		if (!mls_dominate_effective(subj, obj))  in mls_sysvmsq_check_msqctl()
2269 	struct mac_mls *subj, *obj;  in mls_sysvsem_check_semctl()  local
2275 	obj = SLOT(semaklabel);  in mls_sysvsem_check_semctl()
2282 		if (!mls_dominate_effective(obj, subj))  in mls_sysvsem_check_semctl()
2292 		if (!mls_dominate_effective(subj, obj))  in mls_sysvsem_check_semctl()
2307 	struct mac_mls *subj, *obj;  in mls_sysvsem_check_semget()  local
2313 	obj = SLOT(semaklabel);  in mls_sysvsem_check_semget()
2315 	if (!mls_dominate_effective(subj, obj))  in mls_sysvsem_check_semget()
2325 	struct mac_mls *subj, *obj;  in mls_sysvsem_check_semop()  local
2331 	obj = SLOT(semaklabel);  in mls_sysvsem_check_semop()
2334 		if (!mls_dominate_effective(subj, obj))  in mls_sysvsem_check_semop()
2338 		if (!mls_dominate_effective(obj, subj))  in mls_sysvsem_check_semop()
2367 	struct mac_mls *subj, *obj;  in mls_sysvshm_check_shmat()  local
2373 	obj = SLOT(shmseglabel);  in mls_sysvshm_check_shmat()
2375 	if (!mls_dominate_effective(subj, obj))  in mls_sysvshm_check_shmat()
2378 		if (!mls_dominate_effective(obj, subj))  in mls_sysvshm_check_shmat()
2389 	struct mac_mls *subj, *obj;  in mls_sysvshm_check_shmctl()  local
2395 	obj = SLOT(shmseglabel);  in mls_sysvshm_check_shmctl()
2400 		if (!mls_dominate_effective(obj, subj))  in mls_sysvshm_check_shmctl()
2406 		if (!mls_dominate_effective(subj, obj))  in mls_sysvshm_check_shmctl()
2421 	struct mac_mls *subj, *obj;  in mls_sysvshm_check_shmget()  local
2427 	obj = SLOT(shmseglabel);  in mls_sysvshm_check_shmget()
2429 	if (!mls_dominate_effective(obj, subj))  in mls_sysvshm_check_shmget()
2510 	struct mac_mls *subj, *obj;  in mls_vnode_check_chdir()  local
2516 	obj = SLOT(dvplabel);  in mls_vnode_check_chdir()
2518 	if (!mls_dominate_effective(subj, obj))  in mls_vnode_check_chdir()
2528 	struct mac_mls *subj, *obj;  in mls_vnode_check_chroot()  local
2534 	obj = SLOT(dvplabel);  in mls_vnode_check_chroot()
2536 	if (!mls_dominate_effective(subj, obj))  in mls_vnode_check_chroot()
2546 	struct mac_mls *subj, *obj;  in mls_vnode_check_create()  local
2552 	obj = SLOT(dvplabel);  in mls_vnode_check_create()
2554 	if (!mls_dominate_effective(obj, subj))  in mls_vnode_check_create()
2564 	struct mac_mls *subj, *obj;  in mls_vnode_check_deleteacl()  local
2570 	obj = SLOT(vplabel);  in mls_vnode_check_deleteacl()
2572 	if (!mls_dominate_effective(obj, subj))  in mls_vnode_check_deleteacl()
2582 	struct mac_mls *subj, *obj;  in mls_vnode_check_deleteextattr()  local
2588 	obj = SLOT(vplabel);  in mls_vnode_check_deleteextattr()
2590 	if (!mls_dominate_effective(obj, subj))  in mls_vnode_check_deleteextattr()
2601 	struct mac_mls *subj, *obj, *exec;  in mls_vnode_check_exec()  local
2620 	obj = SLOT(vplabel);  in mls_vnode_check_exec()
2622 	if (!mls_dominate_effective(subj, obj))  in mls_vnode_check_exec()
2632 	struct mac_mls *subj, *obj;  in mls_vnode_check_getacl()  local
2638 	obj = SLOT(vplabel);  in mls_vnode_check_getacl()
2640 	if (!mls_dominate_effective(subj, obj))  in mls_vnode_check_getacl()
2650 	struct mac_mls *subj, *obj;  in mls_vnode_check_getextattr()  local
2656 	obj = SLOT(vplabel);  in mls_vnode_check_getextattr()
2658 	if (!mls_dominate_effective(subj, obj))  in mls_vnode_check_getextattr()
2669 	struct mac_mls *subj, *obj;  in mls_vnode_check_link()  local
2675 	obj = SLOT(dvplabel);  in mls_vnode_check_link()
2677 	if (!mls_dominate_effective(obj, subj))  in mls_vnode_check_link()
2680 	obj = SLOT(vplabel);  in mls_vnode_check_link()
2681 	if (!mls_dominate_effective(obj, subj))  in mls_vnode_check_link()
2692 	struct mac_mls *subj, *obj;  in mls_vnode_check_listextattr()  local
2698 	obj = SLOT(vplabel);  in mls_vnode_check_listextattr()
2700 	if (!mls_dominate_effective(subj, obj))  in mls_vnode_check_listextattr()
2710 	struct mac_mls *subj, *obj;  in mls_vnode_check_lookup()  local
2716 	obj = SLOT(dvplabel);  in mls_vnode_check_lookup()
2718 	if (!mls_dominate_effective(subj, obj))  in mls_vnode_check_lookup()
2728 	struct mac_mls *subj, *obj;  in mls_vnode_check_mmap()  local
2738 	obj = SLOT(vplabel);  in mls_vnode_check_mmap()
2741 		if (!mls_dominate_effective(subj, obj))  in mls_vnode_check_mmap()
2745 		if (!mls_dominate_effective(obj, subj))  in mls_vnode_check_mmap()
2756 	struct mac_mls *subj, *obj;  in mls_vnode_check_open()  local
2762 	obj = SLOT(vplabel);  in mls_vnode_check_open()
2766 		if (!mls_dominate_effective(subj, obj))  in mls_vnode_check_open()
2770 		if (!mls_dominate_effective(obj, subj))  in mls_vnode_check_open()
2781 	struct mac_mls *subj, *obj;  in mls_vnode_check_poll()  local
2787 	obj = SLOT(vplabel);  in mls_vnode_check_poll()
2789 	if (!mls_dominate_effective(subj, obj))  in mls_vnode_check_poll()
2799 	struct mac_mls *subj, *obj;  in mls_vnode_check_read()  local
2805 	obj = SLOT(vplabel);  in mls_vnode_check_read()
2807 	if (!mls_dominate_effective(subj, obj))  in mls_vnode_check_read()
2817 	struct mac_mls *subj, *obj;  in mls_vnode_check_readdir()  local
2823 	obj = SLOT(dvplabel);  in mls_vnode_check_readdir()
2825 	if (!mls_dominate_effective(subj, obj))  in mls_vnode_check_readdir()
2835 	struct mac_mls *subj, *obj;  in mls_vnode_check_readlink()  local
2841 	obj = SLOT(vplabel);  in mls_vnode_check_readlink()
2843 	if (!mls_dominate_effective(subj, obj))  in mls_vnode_check_readlink()
2905 	struct mac_mls *subj, *obj;  in mls_vnode_check_rename_from()  local
2911 	obj = SLOT(dvplabel);  in mls_vnode_check_rename_from()
2913 	if (!mls_dominate_effective(obj, subj))  in mls_vnode_check_rename_from()
2916 	obj = SLOT(vplabel);  in mls_vnode_check_rename_from()
2918 	if (!mls_dominate_effective(obj, subj))  in mls_vnode_check_rename_from()
2929 	struct mac_mls *subj, *obj;  in mls_vnode_check_rename_to()  local
2935 	obj = SLOT(dvplabel);  in mls_vnode_check_rename_to()
2937 	if (!mls_dominate_effective(obj, subj))  in mls_vnode_check_rename_to()
2941 		obj = SLOT(vplabel);  in mls_vnode_check_rename_to()
2943 		if (!mls_dominate_effective(obj, subj))  in mls_vnode_check_rename_to()
2954 	struct mac_mls *subj, *obj;  in mls_vnode_check_revoke()  local
2960 	obj = SLOT(vplabel);  in mls_vnode_check_revoke()
2962 	if (!mls_dominate_effective(obj, subj))  in mls_vnode_check_revoke()
2972 	struct mac_mls *subj, *obj;  in mls_vnode_check_setacl()  local
2978 	obj = SLOT(vplabel);  in mls_vnode_check_setacl()
2980 	if (!mls_dominate_effective(obj, subj))  in mls_vnode_check_setacl()
2990 	struct mac_mls *subj, *obj;  in mls_vnode_check_setextattr()  local
2996 	obj = SLOT(vplabel);  in mls_vnode_check_setextattr()
2998 	if (!mls_dominate_effective(obj, subj))  in mls_vnode_check_setextattr()
3010 	struct mac_mls *subj, *obj;  in mls_vnode_check_setflags()  local
3016 	obj = SLOT(vplabel);  in mls_vnode_check_setflags()
3018 	if (!mls_dominate_effective(obj, subj))  in mls_vnode_check_setflags()
3028 	struct mac_mls *subj, *obj;  in mls_vnode_check_setmode()  local
3034 	obj = SLOT(vplabel);  in mls_vnode_check_setmode()
3036 	if (!mls_dominate_effective(obj, subj))  in mls_vnode_check_setmode()
3046 	struct mac_mls *subj, *obj;  in mls_vnode_check_setowner()  local
3052 	obj = SLOT(vplabel);  in mls_vnode_check_setowner()
3054 	if (!mls_dominate_effective(obj, subj))  in mls_vnode_check_setowner()
3064 	struct mac_mls *subj, *obj;  in mls_vnode_check_setutimes()  local
3070 	obj = SLOT(vplabel);  in mls_vnode_check_setutimes()
3072 	if (!mls_dominate_effective(obj, subj))  in mls_vnode_check_setutimes()
3082 	struct mac_mls *subj, *obj;  in mls_vnode_check_stat()  local
3088 	obj = SLOT(vplabel);  in mls_vnode_check_stat()
3090 	if (!mls_dominate_effective(subj, obj))  in mls_vnode_check_stat()
3101 	struct mac_mls *subj, *obj;  in mls_vnode_check_unlink()  local
3107 	obj = SLOT(dvplabel);  in mls_vnode_check_unlink()
3109 	if (!mls_dominate_effective(obj, subj))  in mls_vnode_check_unlink()
3112 	obj = SLOT(vplabel);  in mls_vnode_check_unlink()
3114 	if (!mls_dominate_effective(obj, subj))  in mls_vnode_check_unlink()
3124 	struct mac_mls *subj, *obj;  in mls_vnode_check_write()  local
3130 	obj = SLOT(vplabel);  in mls_vnode_check_write()
3132 	if (!mls_dominate_effective(obj, subj))  in mls_vnode_check_write()