Fedora Linux

allow_httpd_anon_write		Permits Apache to write to files labeled with type public_content_rw_t (see Table 8-2).	Off
named_write_master_zones	Allow named to overwrite master zone files.	Required for dhcpd updating of zones.	Off
nfs_export_all_ro	Allow reading on any NFS filesystem.	Enables NFS file sharing (read-only).	Off
nfs_export_all_rw	Allow read/write/create on any NFS filesystem.	Enables NFS file sharing (read/write).	Off
use_nfs_home_dirs	Support NFS home directories.	Allows home directories (such as /home/chris) to be imported from an NFS server.	Off
samba_enable_home_dirs	Allow Samba to share users' home directories.	Allows homes shares in smb.conf.	Off
use_samba_home_dirs	Allow users to log in with CIFS home directories.	Allows home directories (such as /home/chris) to be imported from a Samba or Windows server.	Off
allow_samba_anon_write		Permits Samba to write to files labeled with type public_content_rw_t.	Off
spamassasin_can_network	Allow Spam Assassin daemon network access.	Enables the use of real-time blackhole lists (RBLs) by Spam Assassin.	Off
ssh_sysadm_login	Allow SSH logins as sysadm_r:sysadm_t.	Allows root login via SSH (otherwise, you'll need to log in as a regular user and then use su). This may be required if you're running remote backups via SSH.	Off
subsystem_disable_trans	Disable SELinux protection for subsystem.	Use this as a last alternative. It's better to disable SELinux protection for one subsystem than to turn it off entirely.	Off

8.2.1.3. Using file labels

SELinux uses file labels to specify an SELinux context for each file. To display the context labels, use the -Z or --context options to ls :

$ ls -Z /etc
-rw-r--r-- root root system_u:object_r:etc_t a2ps.cfg
-rw-r--r-- root root system_u:object_r:etc_t a2ps-site.cfg
drwxr-xr-x root root system_u:object_r:etc_t acpi
-rw-r--r-- root root system_u:object_r:adjtime_t adjtime
drwxr-xr-x root root system_u:object_r:etc_t alchemist
-rw-r--r-- root root system_u:object_r:etc_aliases_t aliases
-rw-r----- root smmsp system_u:object_r:etc_aliases_t aliases.db
drwxr-xr-x root root system_u:object_r:etc_t alsa
drwxr-xr-x root root system_u:object_r:etc_t alternatives
-rw-r--r-- root root system_u:object_r:etc_t anacrontab
-rw------- root root system_u:object_r:etc_t at.deny
-rw-r--r-- root root system_u:object_r:automount_etc_t auto.master
-rw-r--r-- root root system_u:object_r:automount_etc_t auto.misc
-rwxr-xr-x root root system_u:object_r:automount_etc_t auto.net
-rwxr-xr-x root root system_u:object_r:automount_etc_t auto.smb
...(Lines snipped)...

The context label displayed on each line contains the text system_u:object_r: followed by the file type