Filesystem-Level Security Hooks

You will be able to explain how mandatory access control systems insert checks into the VFS path lookup sequence.