constraint_expr_eval
!constraint_expr_eval(policydb, scontext, tcontext, NULL,
if (!constraint_expr_eval(policydb, &oentry->context,