Look section 5.2.2 of "The Flask Security Architecture: System Support for Diverse Security Policies".

How does selinux implement "client and server identification" based on LSM? Is it necessary?