mac_vnode_check_chroot
if ((error = mac_vnode_check_chroot(td->td_ucred, pr->pr_root)))
error = mac_vnode_check_chroot(td->td_ucred, vp);
int mac_vnode_check_chroot(struct ucred *cred, struct vnode *dvp);