Status: OUT
RHEL 9 implements layered access control from filesystem-level DAC (ugo/rwx permissions, setgid collaboration, hard/soft links) through SELinux MAC (Type Enforcement as primary policy, per-domain permissive mode, AVC denial logging), with DAC evaluated before MAC.