pub fn check_file_access(
_path: &str,
access: AccessType,
pid: u64,
) -> Result<(), KernelError>Expand description
Check file access using both MAC policy and capability system.
Maps the calling process to a security domain and checks if that domain can access file objects with the given access type. Also verifies capability rights if a capability space is available for the process.