From info coreutils 'ls invocation' | grep -1 '[.+]. character'
under Linux
GNU `ls' uses a `.' character to indicate a file with an SELinux security context, but no other alternate access method. A file with any other combination of alternate access methods is marked with a `+' character.