SMACK: support the smack 'L' mode for smack permission