Feature request: selinux context checking

[cgzones]

Hi, i'd like to propose checking the selinux context of a process.

Possible syntax:

check process myprocess matching myprocess
    if failed secontext "system_u:object_r:mydomain_t:s0" then alert

Kindly regards,

Christian Göttsche