157 	struct mac_do_rule *rules;  in mac_do_rule_find()  local
162 			rules = &rules0;  in mac_do_rule_find()
165 		rules = osd_jail_get(pr, mac_do_osd_jail_slot);  in mac_do_rule_find()
166 		if (rules != NULL)  in mac_do_rule_find()
172 	return (rules);  in mac_do_rule_find()
181 	struct mac_do_rule *rules;  in sysctl_rules()  local
184 	rules = mac_do_rule_find(req->td->td_ucred->cr_prison, &pr);  in sysctl_rules()
187 		return (sysctl_handle_string(oidp, rules->string, MAC_RULE_STRING_LEN, req));  in sysctl_rules()
192 	strlcpy(new_string, rules->string, MAC_RULE_STRING_LEN);  in sysctl_rules()
207 	TAILQ_CONCAT(&saved_head, &rules->head, r_entries);  in sysctl_rules()
208 	TAILQ_CONCAT(&rules->head, &head, r_entries);  in sysctl_rules()
209 	strlcpy(rules->string, new_string, MAC_RULE_STRING_LEN);  in sysctl_rules()
218 SYSCTL_PROC(_security_mac_do, OID_AUTO, rules,
234 	struct mac_do_rule *rules, *new_rules;  in mac_do_alloc_prison()  local
237 	rules = mac_do_rule_find(pr, &ppr);  in mac_do_alloc_prison()
244 	rules = mac_do_rule_find(pr, &ppr);  in mac_do_alloc_prison()
255 		*lrp = rules;  in mac_do_alloc_prison()
274 	struct mac_do_rule *rules;  in mac_do_prison_set()  local
283 		rules = NULL;  in mac_do_prison_set()
293 		mac_do_alloc_prison(pr, &rules);  in mac_do_prison_set()
304 		TAILQ_CONCAT(&saved_head, &rules->head, r_entries);  in mac_do_prison_set()
305 		TAILQ_CONCAT(&rules->head, &head, r_entries);  in mac_do_prison_set()
306 		strlcpy(rules->string, rules_string, MAC_RULE_STRING_LEN);  in mac_do_prison_set()
315 SYSCTL_JAIL_PARAM_STRING(_mdo, rules, CTLFLAG_RW, MAC_RULE_STRING_LEN,
323 	struct mac_do_rule *rules;  in mac_do_prison_get()  local
326 	rules = mac_do_rule_find(pr, &ppr);  in mac_do_prison_get()
330 	error = vfs_setopts(opts, "mdo.rules", rules->string);  in mac_do_prison_get()