21416f4
- track whether or not SELinux is enabled/enforcing - handle SELinux specifications in ACLs - start helpers with the context the caller would have gotten by calling the helper directly