76  * ipe_update_policy() - parse a new policy and replace old with it.
93 	struct ipe_policy *old, *ap, *new = NULL;  in ipe_update_policy()  local
100 	new = ipe_new_policy(text, textlen, pkcs7, pkcs7len);  in ipe_update_policy()
101 	if (IS_ERR(new))  in ipe_update_policy()
102 		return PTR_ERR(new);  in ipe_update_policy()
104 	if (strcmp(new->parsed->name, old->parsed->name)) {  in ipe_update_policy()
109 	if (ver_to_u64(old) >= ver_to_u64(new)) {  in ipe_update_policy()
114 	root->i_private = new;  in ipe_update_policy()
115 	swap(new->policyfs, old->policyfs);  in ipe_update_policy()
116 	ipe_audit_policy_load(new);  in ipe_update_policy()
122 		rcu_assign_pointer(ipe_active_policy, new);  in ipe_update_policy()
124 		ipe_audit_policy_activation(old, new);  in ipe_update_policy()
133 	ipe_free_policy(new);  in ipe_update_policy()
157 	struct ipe_policy *new = NULL;  in ipe_new_policy()  local
160 	new = kzalloc(sizeof(*new), GFP_KERNEL);  in ipe_new_policy()
161 	if (!new)  in ipe_new_policy()
165 		new->pkcs7len = pkcs7len;  in ipe_new_policy()
166 		new->pkcs7 = kmemdup(pkcs7, pkcs7len, GFP_KERNEL);  in ipe_new_policy()
167 		if (!new->pkcs7) {  in ipe_new_policy()
172 		rc = verify_pkcs7_signature(NULL, 0, new->pkcs7, pkcs7len,  in ipe_new_policy()
179 					    set_pkcs7_data, new);  in ipe_new_policy()
182 			rc = verify_pkcs7_signature(NULL, 0, new->pkcs7, pkcs7len,  in ipe_new_policy()
185 						    set_pkcs7_data, new);  in ipe_new_policy()
190 		new->textlen = textlen;  in ipe_new_policy()
191 		new->text = kstrdup(text, GFP_KERNEL);  in ipe_new_policy()
192 		if (!new->text) {  in ipe_new_policy()
198 	rc = ipe_parse_policy(new);  in ipe_new_policy()
202 	return new;  in ipe_new_policy()
204 	ipe_free_policy(new);  in ipe_new_policy()
215  * * %-EINVAL	- New active policy version is invalid