608 kauth_acl_evaluate(kauth_cred_t cred, kauth_acl_eval_t eval)  in kauth_acl_evaluate()  argument
621 	if (eval == NULL) {  in kauth_acl_evaluate()
627 	if (eval->ae_requested == 0) {  in kauth_acl_evaluate()
628 		eval->ae_result = KAUTH_RESULT_ALLOW;  in kauth_acl_evaluate()
632 	eval->ae_residual = eval->ae_requested;  in kauth_acl_evaluate()
633 	eval->ae_found_deny = FALSE;  in kauth_acl_evaluate()
646 	KAUTH_DEBUG("    ACL - %d entries, initial residual %x", eval->ae_count, eval->ae_residual);  in kauth_acl_evaluate()
647 	for (i = 0, ace = eval->ae_acl; i < eval->ae_count; i++, ace++) {  in kauth_acl_evaluate()
660 			rights |= eval->ae_exp_gall;  in kauth_acl_evaluate()
663 			rights |= eval->ae_exp_gread;  in kauth_acl_evaluate()
666 			rights |= eval->ae_exp_gwrite;  in kauth_acl_evaluate()
669 			rights |= eval->ae_exp_gexec;  in kauth_acl_evaluate()
679 			if (!(eval->ae_residual & rights)) {  in kauth_acl_evaluate()
684 			if (!(eval->ae_requested & rights)) {  in kauth_acl_evaluate()
687 			eval->ae_found_deny = TRUE;  in kauth_acl_evaluate()
700 			applies = eval->ae_options & KAUTH_AEVAL_IS_OWNER;  in kauth_acl_evaluate()
703 			if (!gotguid || (eval->ae_options & KAUTH_AEVAL_IN_GROUP_UNKNOWN)) {  in kauth_acl_evaluate()
706 				applies = eval->ae_options & KAUTH_AEVAL_IN_GROUP;  in kauth_acl_evaluate()
758 			eval->ae_residual = eval->ae_residual & ~rights;  in kauth_acl_evaluate()
759 			KAUTH_DEBUG("    ACL[%d] - rights %x leave residual %x", i, rights, eval->ae_residual);  in kauth_acl_evaluate()
761 			if (eval->ae_residual == 0) {  in kauth_acl_evaluate()
762 				eval->ae_result = KAUTH_RESULT_ALLOW;  in kauth_acl_evaluate()
768 			if (eval->ae_requested & rights) {  in kauth_acl_evaluate()
770 				eval->ae_result = KAUTH_RESULT_DENY;  in kauth_acl_evaluate()
780 	eval->ae_result = KAUTH_RESULT_DEFER;  in kauth_acl_evaluate()