mac_prison_check_relabel
int mac_prison_check_relabel(struct ucred *cred, struct prison *pr,
error = mac_prison_check_relabel(cred, pr, label);