947 				       const struct cred *ocred)  in is_subset_of_obj_privilege()  argument
949 	if (cred == ocred)  in is_subset_of_obj_privilege()
952 	if (!aa_label_is_subset(label, cred_label(ocred)))  in is_subset_of_obj_privilege()
955 	if (cred->user_ns != ocred->user_ns)  in is_subset_of_obj_privilege()
957 	if (!cap_issubset(cred->cap_inheritable, ocred->cap_inheritable))  in is_subset_of_obj_privilege()
959 	if (!cap_issubset(cred->cap_permitted, ocred->cap_permitted))  in is_subset_of_obj_privilege()
961 	if (!cap_issubset(cred->cap_effective, ocred->cap_effective))  in is_subset_of_obj_privilege()
963 	if (!cap_issubset(cred->cap_bset, ocred->cap_bset))  in is_subset_of_obj_privilege()
965 	if (!cap_issubset(cred->cap_ambient, ocred->cap_ambient))  in is_subset_of_obj_privilege()
982 			 struct aa_ns *ns, const struct cred *ocred, u32 mask)  in aa_may_manage_policy()  argument
998 	if (ocred && !is_subset_of_obj_privilege(subj_cred, label, ocred))  in aa_may_manage_policy()