Status: IN
In the `targeted` SELinux policy, MCS is not configured for regular users by default — a CIL module with `(typeattributeset mcs_constrained_type (user_t))` must be installed via `semodule -i`.
Source: repo:entries/2026/03/04/en-documentation-red_hat_enterprise_linux-9-html-using_selinux-assembly_using-mu.md