mac_prison_init
error = mac_prison_init(pr, M_WAITOK);
error = mac_prison_init(&prison0, M_WAITOK);
int mac_prison_init(struct prison *pr, int flag);