selinux_xfrm_policy_alloc
LSM_HOOK_INIT(xfrm_policy_alloc_security, selinux_xfrm_policy_alloc),
int selinux_xfrm_policy_alloc(struct xfrm_sec_ctx **ctxp,