MAC_MLS_FLAGS_BOTH
if ((mm_temp.mm_flags & MAC_MLS_FLAGS_BOTH) !=
KASSERT((mm->mm_flags & MAC_MLS_FLAGS_BOTH) == MAC_MLS_FLAGS_BOTH,
error = mls_atmostflags(new, MAC_MLS_FLAGS_BOTH);
if (new->mm_flags & MAC_MLS_FLAGS_BOTH) {
if ((new->mm_flags & MAC_MLS_FLAGS_BOTH) ==
MAC_MLS_FLAGS_BOTH && !mls_effective_in_range(new, new))
error = mls_atmostflags(new, MAC_MLS_FLAGS_BOTH);