12.2. Types

The main permission control method used in SELinux targeted policy to provide advanced process isolation is Type Enforcement. All files and processes are labeled with a type: types define a SELinux domain for processes and a SELinux type for files. SELinux policy rules define how types access each other, whether it be a domain accessing a type, or a domain accessing another domain. Access is only allowed if a specific SELinux policy rule exists that allows it.

The following types are used with Postfix. Different types all you to configure flexible access:

grep postfix /etc/selinux/targeted/contexts/files/file_contexts

~]$ grep postfix /etc/selinux/targeted/contexts/files/file_contexts