AA_MAY_ONEXEC
request = AA_MAY_ONEXEC;
perms->allow = AA_MAY_CHANGE_PROFILE | AA_MAY_ONEXEC;
if (!(perms.allow & AA_MAY_ONEXEC)) {
error = change_profile_perms(profile, onexec, stack, AA_MAY_ONEXEC,
perms.allow &= ~AA_MAY_ONEXEC;
AA_MAY_ONEXEC, xname,
AA_MAY_ONEXEC, bprm->filename, NULL,
AA_MAY_STACK | AA_MAY_ONEXEC | \
perms->allow |= AA_MAY_ONEXEC;