From info coreutils 'ls invocation' | grep -1 '[.+]. character' under Linux
GNU `ls' uses a `.' character to indicate a file with an SELinux
security context, but no other alternate access method.
A file with any other combination of alternate access methods is
marked with a `+' character.