Status: IN
DAC (traditional Unix permissions) rules are checked before SELinux (MAC) rules; if DAC denies access, SELinux is never consulted and no AVC denial is logged.
Source: repo:entries/2026/03/04/en-documentation-red_hat_enterprise_linux-9-html-using_selinux-getting-started-w.md