...

/usr/sbin/selabel_partial_match