1. A method comprising: identifying, by a processing device, a request of a process to create a new object in a file system of the processing device, the new object having a name; identifying, by the processing device, a policy rule applicable to the new object in view of parameters for a label of the process, a label of a parent object pertaining to the new object, a class of the new object, and the name of the new object; creating, by the processing device, a label for the new object using the applicable policy rule in view of the parameters; and associating, by the processing device, the new object with the created label.