One can write extraordinarily short FC files using regexp to apply specific SELinux labels as desired, and control access to those labels with only a few rules.

One can write extraordinarily short FC files using regexp to apply specific SELinux labels as desired, and control access to those labels with only a few rules. Unlike systemd, they then apply to everything.