ovl_security_fileattr
err = ovl_security_fileattr(realpath, fa, true);
err = ovl_security_fileattr(realpath, fa, false);