A replacement for the Unix read, write, and execute bits

A kernel option that requires recompilation whenever it changes

The complete SELinux security context assigned to one file

An on/off switch for a specific optional behavior in the SELinux policy