Function check_task_create_access 

pub fn check_task_create_access(current_task: &CurrentTask) -> Result<(), Errno>

Checks if creating a task is allowed. Directly maps to the selinux_task_create LSM hook from the original NSA white paper. Partially corresponds to the task_alloc() LSM hook. Compared to task_alloc(), this hook doesn’t actually modify the task’s label, but instead verifies whether the task has the “fork” permission on itself.