label_mediates
if (unconfined(label) || !label_mediates(label, AA_CLASS_FILE))
return label_mediates(L, C);
return label_mediates(&profile->label, class);
!label_mediates(&tracee->label, AA_CLASS_PTRACE))
if (label_mediates(&tracer->label, AA_CLASS_PTRACE))