1457 	long sff;  local
1483 	sff = SFF_ROOTOK|SFF_REGONLY;
1486 		sff |= SFF_CREAT;
1488 			sff |= SFF_NOSLINK;
1490 			sff |= SFF_NOHLINK;
1496 			sff |= SFF_NOWLINK;
1499 		sff |= SFF_SAFEDIRPATH;
1501 		       sff, smode, &std);
1504 			       sff, smode, &stp);
1549 		long sff = SFF_CREAT|SFF_OPENASROOT;
1552 			sff |= SFF_NOSLINK;
1554 			sff |= SFF_NOHLINK;
1556 		dirfd = safeopen(dirfile, mode, DBMMODE, sff);
1557 		pagfd = safeopen(pagfile, mode, DBMMODE, sff);
2051 	long sff;  variable
2081 	sff = SFF_ROOTOK|SFF_REGONLY;
2084 		sff |= SFF_CREAT;
2086 			sff |= SFF_NOSLINK;
2088 			sff |= SFF_NOHLINK;
2094 			sff |= SFF_NOWLINK;
2097 		sff |= SFF_SAFEDIRPATH;
2098 	i = safefile(buf, RunAsUid, RunAsGid, RunAsUserName, sff, smode, &st);
2730 	long sff;  local
2763 	sff = SFF_ROOTOK|SFF_REGONLY;
2774 		sff |= SFF_CREAT;
2776 			sff |= SFF_NOSLINK;
2778 			sff |= SFF_NOHLINK;
2785 			sff |= SFF_NOWLINK;
2788 		sff |= SFF_SAFEDIRPATH;
2789 	status = safefile(buf, RunAsUid, RunAsGid, RunAsUserName, sff, smode, &st);
4838 		long sff = SFF_OPENASROOT|SFF_ROOTOK|SFF_NOWLINK|SFF_NOWWFILES|SFF_NOGWFILES;  local
4841 			sff |= SFF_NOLOCK;
4862 					O_RDONLY, 0, sff);
6143 	long sff;  local
6171 	sff = SFF_ROOTOK|SFF_REGONLY;
6173 		sff |= SFF_NOWLINK;
6175 		sff |= SFF_SAFEDIRPATH;
6177 			  sff, S_IRUSR, NULL)) != 0)
6229 	map->map_sff = sff;
6252 	long sff = map->map_sff;  local
6269 	f = safefopen(map->map_file, O_RDONLY, FileMode, sff);
6442 	long sff;  local
6456 	sff = SFF_ROOTOK|SFF_REGONLY;
6458 		sff |= SFF_NOWLINK;
6460 		sff |= SFF_SAFEDIRPATH;
6461 	af = safefopen(map->map_file, O_RDONLY, 0444, sff);
8155 		long sff = SFF_SAFEDIRPATH|SFF_OPENASROOT|SFF_NOLINK|SFF_EXECOK;  local
8164 		errno = safefile(colon, RunAsUid, RunAsGid, RunAsUserName, sff,