- all
- and
- dom
- domby
- eq
- incomp
- ne
- neq
- not
- or
- range
- xor
- allow
- allowx
- auditallow
- auditallowx
- auditdeny
- dontaudit
- dontauditx
- neverallow
- neverallowx
- false
- true
- any
- block
- char
- dir
- file
- pipe
- socket
- symlink
- task
- trans
- xattr
- dccp
- sctp
- tcp
- udp
- self
- unordered
- allow
- deny
- reject
- block
- boolean
- category
- categoryalias
- categoryset
- class
- classmap
- classmapping
- classpermission
- common
- context
- ipaddr
- level
- levelrange
- macro
- optional
- role
- roleattribute
- sensitivity
- sensitivityalias
- sid
- tunable
- type
- typealias
- typeattribute
- user
- handleunknown
- mls
- policycap
- allowxperm
- attributetype
- auditallowxperm
- blockabstract
- blockinherit
- booleanif
- call
- categoryaliasactual
- categoryorder
- categoryrange
- classcommon
- classorder
- classpermissionset
- constrain
- defaultrange
- defaultrole
- defaulttype
- defaultuser
- devicetreecon
- dominance
- dontauditxperm
- expandtypeattribute
- filecon
- fscon
- fsuse
- fsusetask
- fsusetrans
- fsusexattr
- genfscon
- ibendportcon
- ibpkeycon
- in
- iomemcon
- ioportcon
- mlsconstrain
- mlsvalidatetrans
- nametypetransition
- netifcon
- neverallowxperm
- nodecon
- pcidevicecon
- permission
- permissionset
- permissionx
- pirqcon
- portcon
- rangetransition
- roleallow
- roleattributeset
- rolebounds
- roletransition
- roletype
- selinuxuser
- selinuxuserdefault
- sensitivityaliasactual
- sensitivitycategory
- sensitivityorder
- sidcontext
- sidorder
- tunableif
- typealiasactual
- typeattributeset
- typebounds
- typechange
- typemember
- typepermissive
- typetransition
- userattribute
- userattributeset
- userbounds
- userlevel
- userprefix
- userrange
- userrole
- validatetrans
- ioctl
- name
- string
- glblub
- h1
- h2
- high
- l1
- l2
- low
- low-high
- object_r
- perm
- r1
- r2
- r3
- source
- t1
- t2
- t3
- target
- u1
- u2
- u3
policy_capabilities##SELinux Policy
filesystem##SELinux Policy