Re: SElinux integration

[Ivan Gyurdiev <ivg2 cornell edu>]

> How do you actually get the context? Does it need more syscalls than the
> stat that we do by default
Yes, the context is an extended attribute, we get (or set) it through a 
call to libselinux, which knows how to exact it.

      #include <selinux/selinux.h>

      int getfilecon(const char *path, security_context_t *con);
      int lgetfilecon(const char *path, security_context_t *con);
      int fgetfilecon(int fd, security_context_t *con);

> ? If so, it needs to be its own flag (for
> performance reasons).
>   
Okay, will add a flag.