xcheck
xcheck(unix_peer_perm(subj_cred, label, op,
xcheck(fn_for_each((L1), (P), (FN1)), fn_for_each((L2), (P), (FN2)))
error = xcheck(aa_unix_peer_perm(current_cred(),