code: func getSelinuxMountPoint() string {
  	if selinuxfs != "unknown" {
  		return selinuxfs
  	}
  	selinuxfs = ""
  
  	mounts, err := mount.GetMounts()
  	if err != nil {
  		return selinuxfs
  	}
  	for _, mount := range mounts {
  		if mount.Fstype == "selinuxfs" {
  			selinuxfs = mount.Mountpoint
  			break
  		}
  	}
  	if selinuxfs != "" {
  		var buf syscall.Statfs_t
  		syscall.Statfs(selinuxfs, &buf)
  		if (buf.Flags & stRdOnly) == 1 {
  			selinuxfs = ""
  		}
  	}
  	return selinuxfs
  }
docs: // getSelinuxMountPoint returns the path to the mountpoint of an selinuxfs
  // filesystem or an empty string if no mountpoint is found.  Selinuxfs is
  // a proc-like pseudo-filesystem that exposes the selinux policy API to
  // processes.  The existence of an selinuxfs mount is used to determine
  // whether selinux is currently enabled or not.