1688 	long sff;  local
1714 	sff = SFF_ROOTOK|SFF_REGONLY;
1717 		sff |= SFF_CREAT;
1719 			sff |= SFF_NOSLINK;
1721 			sff |= SFF_NOHLINK;
1727 			sff |= SFF_NOWLINK;
1730 		sff |= SFF_SAFEDIRPATH;
1732 		       sff, smode, &std);
1735 			       sff, smode, &stp);
1780 		long sff = SFF_CREAT|SFF_OPENASROOT;
1783 			sff |= SFF_NOSLINK;
1785 			sff |= SFF_NOHLINK;
1787 		dirfd = safeopen(dirfile, mode, DBMMODE, sff);
1788 		pagfd = safeopen(pagfile, mode, DBMMODE, sff);
2274 	long sff;  variable
2292 	sff = SFF_ROOTOK|SFF_REGONLY;
2295 		sff |= SFF_CREAT;
2297 			sff |= SFF_NOSLINK;
2299 			sff |= SFF_NOHLINK;
2305 			sff |= SFF_NOWLINK;
2308 		sff |= SFF_SAFEDIRPATH;
2309 	i = safefile(buf, RunAsUid, RunAsGid, RunAsUserName, sff, smode, &st);
2874 	long sff;  local
2905 	sff = SFF_ROOTOK|SFF_REGONLY;
2908 		sff |= SFF_CREAT;
2910 			sff |= SFF_NOSLINK;
2912 			sff |= SFF_NOHLINK;
2920 			sff |= SFF_NOWLINK;
2923 		sff |= SFF_SAFEDIRPATH;
2924 	status = safefile(buf, RunAsUid, RunAsGid, RunAsUserName, sff, smode, &st);
5092 		long sff = SFF_OPENASROOT|SFF_ROOTOK|SFF_NOWLINK|SFF_NOWWFILES|SFF_NOGWFILES;  local
5095 			sff |= SFF_NOLOCK;
5116 					O_RDONLY, 0, sff);
6406 	long sff;  local
6434 	sff = SFF_ROOTOK|SFF_REGONLY;
6436 		sff |= SFF_NOWLINK;
6438 		sff |= SFF_SAFEDIRPATH;
6440 			  sff, S_IRUSR, NULL)) != 0)
6492 	map->map_sff = sff;
6515 	long sff = map->map_sff;  local
6532 	f = safefopen(map->map_file, O_RDONLY, FileMode, sff);
6705 	long sff;  local
6719 	sff = SFF_ROOTOK|SFF_REGONLY;
6721 		sff |= SFF_NOWLINK;
6723 		sff |= SFF_SAFEDIRPATH;
6724 	af = safefopen(map->map_file, O_RDONLY, 0444, sff);
8426 		long sff = SFF_SAFEDIRPATH|SFF_OPENASROOT|SFF_NOLINK|SFF_EXECOK;  local
8435 		errno = safefile(colon, RunAsUid, RunAsGid, RunAsUserName, sff,