"level": {
          "description": "Level is SELinux level label that applies to the container.",
          "type": "string"
        },
        "role": {
          "description": "Role is a SELinux role label that applies to the container.",
          "type": "string"
        },
        "type": {
          "description": "Type is a SELinux type label that applies to the container.",
          "type": "string"

		}
	}
	if selinux.GetEnabled() {
		err := selinux.SetFileLabel(pluginRegistrationDir, config.KubeletPluginsDirSELinuxLabel)
		if err != nil {
			klog.InfoS("Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir", "path", pluginRegistrationDir, "err", err)
		}
		err = selinux.SetFileLabel(pluginsDir, config.KubeletPluginsDirSELinuxLabel)

			return nil, cleanupAction, fmt.Errorf("cannot find volume %q to mount into container %q", mount.Name, container.Name)
		}

		relabelVolume := false
		// If the volume supports SELinux and it has not been
		// relabeled already and it is not a read-only volume,
		// relabel it and mark it as labeled
		if vol.Mounter.GetAttributes().Managed && vol.Mounter.GetAttributes().SELinuxRelabel && !vol.SELinuxLabeled {

* Eviction manager evicts based on inode consumption ([#35137](https://github.com/kubernetes/kubernetes/pull/35137), [@dashpole](https://github.com/dashpole))
* SELinux Overhaul ([#33663](https://github.com/kubernetes/kubernetes/pull/33663), [@pmorie](https://github.com/pmorie))

id_unsafe_environment_variables.h","kids":[],"cl_weight":0.25,"touches":1,"min_t":1247866588,"max_t":1247866588,"mean_t":1247866588}],"cl_weight":10.770512820512822,"touches":17,"min_t":1247015714,"max_t":1279721617,"mean_t":1254859168},{"name":"selinux","kids":[{"name":"chromium-browser.te","kids":[],"cl_weight":0.16666666666666666,"touches":1,"min_t":1271688673,"max_t":1271688673,"mean_t":1271688673},{"name":"README","kids":[],"cl_weight":0.16666666666666666,"touches":1,"min_t":1271688673,"max...