Interrogating the SELinux subsystem code-wise