An unprivileged user issued a command which produced the following log message:
avc: denied { getattr } for pid=984 exe=/usr/bin/vim path=/etc/shadow dev=03:01 ino=134343
scontext=hugh:user_r:user_t tcontext=system_u:object_r:shadow_t tclass=file
What does the message mean?

A.
User hugh wast running in a security context that permitted reading the file.

B.
User hugh only needs to switch to the object_r role in order to edit /etc/shadow.

C.
The security context for hugh is misconfigured and needs access to read any system file.

D.
User hugh wast running in a security context that permitted writing to the file.