/usr/bin/selabel_lookup_best_match

usage: /usr/bin/selabel_lookup_best_match [-v] [-r] -p path [-m mode] [-f file] [link...]

Where:
	-v     Validate file_contxts entries against loaded policy.
	-r     Use "raw" function.
	-p     Path to check for best match using the link(s) provided.
	-m     Optional mode (b, c, d, p, l, s or f) Defaults to 0.
	-f     Optional file containing the specs (defaults to
	       those used by loaded policy).
	link   Zero or more links to check against, the order of
	       precedence for best match is:
		   1) An exact match for the real path (if no links), or
		   2) An exact match for any of the links (aliases), or
		   3) The longest fixed prefix match.

Example:
	/usr/bin/selabel_lookup_best_match -p /dev/initctl /run/systemd/initctl/fifo
	   Find best matching context for the specified path using one link.