• Synchronize label initialization and destruction arguments: in some cases, the object pointer was still present as an argument to label init/destroy calls, although it was removed in the source a while back. In some cases, we've added blocking dispositions to initialization calls that previously didn't have them (ipq), so add that also. Generally call 'how' 'flag' instead to match the prototypes in mac_policy.h.

• Add missing descriptions of mpo_destroy_vnode_label(), and the recently added mpo_copy_mbuf_label().

Obtained from: TrustedBSD Project
Sponsored by: DARPA, Network Associates Laboratories