get_security_context
if (get_security_context(iph2->sa, &spidx)) {
extern int get_security_context(vchar_t *, struct policyindex *);