It should be noted that there are booleans associated with selinux, the defaults have quite a few booleans that make it easy to allow commonly requested behaviour.

`getsebool -a` and `setsebool` are your friends.