MAC versus DAC in SELinux
Sep 28, 2011, 13:00 (0 Talkback[s])
"This simple real-world example demonstrates how MAC rules
supersede DAC settings. I encourage you to read the system
documentation and experiment on lab systems. Too often system
administrators become frustrated by "AVC Denial" messages and
resort to disabling this enhanced security.