Simplicity is a form of art...

How logins get their SELinux user context
by Sven Vermeulen, post on Sat 27 April 2013

Sometimes, especially when users are converting their systems to be SELinux-enabled, their user context is wrong. An example would be when, after logon (in permissive mode), the user is in the system_u:system_r:local_login_t domain instead of a user domain like staff_u:staff_r:staff …