There is a more reliable way to get context that doesn't need to use regular expression, get it directly from kernel by referencing the 'security' namespace of extended inode attribute:

    [cevich@cevich ~]$ getfattr --name security.selinux notes.txt
    # file: notes.txt
    security.selinux="unconfined_u:object_r:user_home_t:s0"