"With #SELinux technology it’s possible confine not only system process (as it’s by default used in Fedora, #CentOS and #RedHat Enterprise Linux) but also linux users. We call this feature SELinux confined users." https://lukas-vrabec.com/index.php/2021/09/04/selinux-confined-users-and-mcs-benefits/ if you trust #ibm http://techrights.org/2021/01/30/fake-security/