aa_query_label(2) on Linux
The text 4258dbc207b2, as Debian 10 (Buster) shipped it.
query access permission associated with a label aa_query_file_path, aa_query_file_path_len - query access permissions of a file path aa_query_link_path, aa_query_link_path_len - query access permissions of a link path