mac_protect_set
err = mac_protect_set(mch, mrp);
extern int mac_protect_set(mac_client_handle_t, mac_resource_props_t *);