pub(crate) fn host_selinux_enabled() -> Result<bool>Expand description
Whether SELinux is enabled on the host, as observed from PID 1’s mount namespace.
This bypasses libselinux’s process-cached state and is only appropriate while bootstrapping the selinuxfs mount before re-exec.