SELinux offers many different object types and a long vector of different access methods. Nowadays a more object oriented modelling approach would be used to describe the relations and properties but here SELinux shows a bit of its age.