199 	if (!prison_allow(td->td_ucred, PR_ALLOW_QUOTAS))  in sys_quotactl()
287 	error = mac_mount_check_stat(td->td_ucred, mp);  in kern_do_statfs()
294 	if (priv_check_cred_vfs_generation(td->td_ucred)) {  in kern_do_statfs()
296 		prison_enforce_statfs(td->td_ucred, mp, buf);  in kern_do_statfs()
472 			if (prison_canseemount(td->td_ucred, mp) != 0) {  in kern_getfsstat()
477 			if (mac_mount_check_stat(td->td_ucred, mp) != 0) {  in kern_getfsstat()
502 		if (prison_canseemount(td->td_ucred, mp) != 0) {  in kern_getfsstat()
507 		if (mac_mount_check_stat(td->td_ucred, mp) != 0) {  in kern_getfsstat()
545 		if (priv_check_cred_vfs_generation(td->td_ucred)) {  in kern_getfsstat()
550 			prison_enforce_statfs(td->td_ucred, mp, sptmp);  in kern_getfsstat()
1006 	error = mac_vnode_check_chroot(td->td_ucred, nd.ni_vp);  in sys_chroot()
1034 	error = mac_vnode_check_chdir(td->td_ucred, vp);  in change_dir()
1038 	return (VOP_ACCESS(vp, VEXEC, td->td_ucred, td));  in change_dir()
1172 	    td->td_ucred, fp);  in openatfp()
1231 		error = fo_truncate(fp, 0, td->td_ucred, td);  in openatfp()
1428 		error = mac_vnode_check_create(td->td_ucred, nd.ni_dvp,  in kern_mknodat()
1517 	error = mac_vnode_check_create(td->td_ucred, nd.ni_dvp, &nd.ni_cnd,  in kern_mkfifoat()
1675 			error = can_hardlink(vp, td->td_ucred);  in kern_linkat_vp()
1678 				error = mac_vnode_check_link(td->td_ucred,  in kern_linkat_vp()
1796 	error = mac_vnode_check_create(td->td_ucred, nd.ni_dvp, &nd.ni_cnd,  in kern_symlinkat()
1960 	    ((error = VOP_STAT(vp, &sb, td->td_ucred, NOCRED)) == 0) &&  in kern_funlinkat()
1992 		error = mac_vnode_check_unlink(td->td_ucred, nd.ni_dvp, vp,  in kern_funlinkat()
2164 	cred = td->td_ucred;  in kern_accessat()
2171 		td->td_ucred = usecred;  in kern_accessat()
2187 		td->td_ucred = cred;  in kern_accessat()
2478 	error = VOP_STAT(nd.ni_vp, sbp, td->td_ucred, NOCRED);  in kern_statat()
2707 	error = mac_vnode_check_readlink(td->td_ucred, vp);  in kern_readlink_vp()
2723 	error = VOP_READLINK(vp, &auio, td->td_ucred);  in kern_readlink_vp()
2760 	error = mac_vnode_check_setflags(td->td_ucred, vp, vattr.va_flags);  in setfflags()
2763 		error = VOP_SETATTR(vp, &vattr, td->td_ucred);  in setfflags()
2968 	error = setfmode(td, td->td_ucred, nd.ni_vp, mode);  in kern_fchmodat()
2994 	error = fo_chmod(fp, uap->mode, td->td_ucred, td);  in sys_fchmod()
3081 	error = setfown(td, td->td_ucred, nd.ni_vp, uid, gid);  in kern_fchownat()
3125 	error = fo_chown(fp, uap->uid, uap->gid, td->td_ucred, td);  in sys_fchown()
3227 	if (numtimes < 3 && VOP_GETATTR(vp, &vattr, td->td_ucred) == 0 &&  in setutimes()
3240 	error = mac_vnode_check_setutimes(td->td_ucred, vp, vattr.va_atime,  in setutimes()
3244 		error = VOP_SETATTR(vp, &vattr, td->td_ucred);  in setutimes()
3507 	error = mac_vnode_check_write(td->td_ucred, NOCRED, vp);  in kern_truncate()
3511 	error = VOP_ACCESS(vp, VWRITE, td->td_ucred, td);  in kern_truncate()
3515 	error = vn_truncate_locked(vp, length, false, td->td_ucred);  in kern_truncate()
3662 	error = mac_vnode_check_rename_from(td->td_ucred, fromnd->ni_dvp,  in kern_renameat_mac()
3770 		error = mac_vnode_check_rename_to(td->td_ucred, tdvp,  in kern_renameat()
3860 	error = mac_vnode_check_create(td->td_ucred, nd.ni_dvp, &nd.ni_cnd,  in kern_mkdirat()
3949 	error = mac_vnode_check_unlink(td->td_ucred, nd.ni_dvp, vp,  in kern_frmdirat()
4221 	error = mac_vnode_check_readdir(td->td_ucred, vp);  in kern_getdirentries()
4303 	error = mac_vnode_check_revoke(td->td_ucred, vp);  in sys_revoke()
4307 	error = VOP_GETATTR(vp, &vattr, td->td_ucred);  in sys_revoke()
4310 	if (td->td_ucred->cr_uid != vattr.va_uid) {  in sys_revoke()
4629 	error = vn_open_vnode(vp, fmode, td->td_ucred, td, fp);  in kern_fhopen()
4646 		error = fo_truncate(fp, 0, td->td_ucred, td);  in kern_fhopen()
4699 	error = VOP_STAT(vp, sb, td->td_ucred, NOCRED);  in kern_fhstat()
4749 	error = prison_canseemount(td->td_ucred, mp);  in kern_fhstatfs()
4753 	error = mac_mount_check_stat(td->td_ucred, mp);  in kern_fhstatfs()