Access control entry points

• Subjects on subjects

  • mpo_cred_check_see_cred(cred1, cred2)

• Subjects on objects

  • mpo_cred_check_stat_vnode(cred, vnode, vlabel)

• Objects on objects

  • mpo_socket_check_receive_mbuf(socket, slabel, mbuf, mlabel)