verify_perms
if (!verify_perms(rules->file)) {
if (!verify_perms(rules->policy)) {
if (!verify_perms(profile->attach.xmatch)) {