It should be noted that there are booleans associated with selinux, the defaults have quite a few booleans that make it easy to allow commonly requested behaviour.
`getsebool -a` and `setsebool` are your friends.
`getsebool -a` and `setsebool` are your friends.
For example, It can control whether an application can bind to a privileged network port (below 1024) or whether an app can write to areas other than its default working directory.
And it is not immediately obvious when it's causing issues, just because it's not used as strictly or at all in other distros. I was having trouble connecting to a service I started in Fedora, even though I disabled firewalld. Turns out it was SELinux.