mac_cred_check_setuid
error = mac_cred_check_setuid(oldcred, uid);
int mac_cred_check_setuid(struct ucred *cred, uid_t uid);