Sorry for the slowness of my review of this. I had a spare hour there, and added these plumbing patches to better integrate your patch into coreutils. I'll squash these into your patch when finished.
Still todo is: actually analyze/test the meat of the patch write docs write tests Use mode_to_security_class() from libselinux if available thanks, Pádraig.
