Same here, you can just call <code>getfattr</code> with the "security" namespace on anything in the filesystem.  This data comes almost directly from the kernel.