aa_profile_capget
kernel_cap_t aa_profile_capget(struct aa_profile *profile);
allowed = aa_profile_capget(profile);