aa_label_sk_perm
error = aa_label_sk_perm(current_cred(), label, op, request, sk);
return aa_label_sk_perm(subj_cred, label, op, request, sock->sk);