aa_sock_file_perm
error = aa_sock_file_perm(subj_cred, label, op, request, file);
last_error(error, aa_sock_file_perm(subj_cred, flabel, op,
int aa_sock_file_perm(const struct cred *subj_cred, struct aa_label *label,