{"id":"mcs-enforced-after-dac-and-te","text":"MCS is evaluated after DAC and Type Enforcement — it can only further restrict access, never relax it.","truth_value":"IN","source":"repo:entries/2026/03/04/en-documentation-red_hat_enterprise_linux-9-html-using_selinux-assembly_using-mu.md","source_url":"","source_hash":"","justifications":[],"dependents":[],"metadata":{},"explanation":{"steps":[{"node":"mcs-enforced-after-dac-and-te","truth_value":"IN","reason":"premise"}]}}