Hi all,
 
The selinux extend to the measument list could be written like 'measure func=FILE_CHECK mask=MAY_READ obj_type=my_app_t'. Where could I find document about the selinux extension ? For example, how many mask could there be?  If I want to measuremnt some files after system on even no operations(no read or exec ops ) on these files, how to write the policy file ?
 
Thanks for your reply!
 
Thanks and regards,
Jason