IMA_FILE_APPRAISE
#define IMA_APPRAISE_SUBMASK (IMA_FILE_APPRAISE | IMA_MMAP_APPRAISE | \
if (action & IMA_FILE_APPRAISE)
return IMA_FILE_APPRAISE;