--- xnu/xnu-12377.121.6/security/mac_socket.c
+++ xnu/xnu-8019.41.5/security/mac_socket.c
@@ -97,7 +97,7 @@
 #endif
 
 	MAC_CHECK(socket_check_accept, cred,
-	    (socket_t)so, NULL);
+	    (socket_t)so, so->so_label);
 	return error;
 }
 
@@ -119,7 +119,7 @@
 		error = ECONNABORTED;
 	} else {
 		MAC_CHECK(socket_check_accepted, cred,
-		    (socket_t)so, NULL, sockaddr);
+		    (socket_t)so, so->so_label, sockaddr);
 		sock_freeaddr(sockaddr);
 	}
 	return error;
@@ -140,7 +140,7 @@
 #endif
 
 	MAC_CHECK(socket_check_bind, ucred,
-	    (socket_t)so, NULL, sockaddr);
+	    (socket_t)so, so->so_label, sockaddr);
 	return error;
 }
 
@@ -158,7 +158,7 @@
 #endif
 
 	MAC_CHECK(socket_check_connect, cred,
-	    (socket_t)so, NULL,
+	    (socket_t)so, so->so_label,
 	    sockaddr);
 	return error;
 }
@@ -192,7 +192,7 @@
 #endif
 
 	MAC_CHECK(socket_check_ioctl, cred,
-	    (socket_t)so, cmd, NULL);
+	    (socket_t)so, cmd, so->so_label);
 	return error;
 }
 
@@ -209,7 +209,7 @@
 #endif
 
 	MAC_CHECK(socket_check_stat, cred,
-	    (socket_t)so, NULL);
+	    (socket_t)so, so->so_label);
 	return error;
 }
 
@@ -226,7 +226,7 @@
 #endif
 
 	MAC_CHECK(socket_check_listen, cred,
-	    (socket_t)so, NULL);
+	    (socket_t)so, so->so_label);
 	return error;
 }
 
@@ -243,7 +243,7 @@
 #endif
 
 	MAC_CHECK(socket_check_receive, cred,
-	    (socket_t)so, NULL);
+	    (socket_t)so, so->so_label);
 	return error;
 }
 
@@ -260,7 +260,7 @@
 #endif
 
 	MAC_CHECK(socket_check_received, cred,
-	    so, NULL, saddr);
+	    so, so->so_label, saddr);
 	return error;
 }
 
@@ -278,7 +278,7 @@
 #endif
 
 	MAC_CHECK(socket_check_send, cred,
-	    (socket_t)so, NULL, sockaddr);
+	    (socket_t)so, so->so_label, sockaddr);
 	return error;
 }
 
@@ -296,7 +296,7 @@
 #endif
 
 	MAC_CHECK(socket_check_setsockopt, cred,
-	    (socket_t)so, NULL, sopt);
+	    (socket_t)so, so->so_label, sopt);
 	return error;
 }
 
@@ -314,6 +314,6 @@
 #endif
 
 	MAC_CHECK(socket_check_getsockopt, cred,
-	    (socket_t)so, NULL, sopt);
-	return error;
-}
+	    (socket_t)so, so->so_label, sopt);
+	return error;
+}