Function check_bpf_map_access 

pub fn check_bpf_map_access(
    current_task: &CurrentTask,
    bpf_map: &BpfMap,
    flags: PermissionFlags,
) -> Result<(), Errno>

Checks whether current_task can create a bpf_map. This hook is called from the sys_bpf() syscall when the kernel tries to generate and return a file descriptor for maps. Corresponds to the bpf_map() LSM hook.