within_range
|| !within_range(a->sec_ctx.ctx_str, b->sec_ctx.ctx_str))
extern int within_range(security_context_t, security_context_t);