An unprivileged user issued a command which produced the following log message:

avc: denied { getattr } for pid=984 exe=/usr/bin/vim path=/etc/shadow dev=03:01 ino=134343 scontext=hugh:user_r:user_t tcontext=system_u:object:shadow_t tclass=file

What does the message mean?

A.
User hugh was not running in a security context that permitted reading the file

B.
User hugh only needs to switch to the object_r role in order to edit /etc/shadow

C.
The security context fur hugh is misconfigured and needs access to read any system file

D.
User hugh was not running in a security context that permitted writing to the file