/* set the file creation context in a security record to the same as the objective context of the specified inode  */
static int selinux_kernel_create_files_as(struct cred *new, struct inode *inode)
/* set the file creation context in a security record to the same as the objective context of the specified inode  */
static int selinux_kernel_create_files_as(struct cred *new, struct inode *inode)
{
	struct inode_security_struct *isec = inode->i_security;
	struct task_security_struct *tsec = new->security;
	u32 sid = current_sid();
	int ret;
	ret = avc_has_perm(sid, isec->sid,
			   SECCLASS_KERNEL_SERVICE,
			   KERNEL_SERVICE__CREATE_FILES_AS,
			   NULL);
	if (ret == 0)
		tsec->create_sid = isec->sid;
	return 0;
}