The -Z flag prints the SELinux security context column, which labels each file with a type such as etc_t or shadow_t. SELinux is the mandatory access control system used on RHEL and Fedora, and Ubuntu systems show an empty column instead. Pair it with getenforce to see whether SELinux is enforcing.
Looking for more? Search all 7,657 commands — works offline, in English or Spanish, and fixes typos.