28

Chapter 2. SELinux Policy Overview

Security file contexts are stored in the values in the security.selinux parameter of the file's

extended attributes. This field is read when any subject makes a request for the SELinux type of a

file. Extended attribute support is extremely limited for pseudo file systems at this time. Currently

only devpts has support for xattrs, but work is ongoing to add further support for more pseudo file

systems.

As with the other special interfaces, it is recommended to use

libselinux

to interface with the

functions.