1. What is the difference between an unconfined domain and a permissive domain? 2. How can we run applications in a very restricted domain? 3. How can we easily switch the domain in which a service...

1. What is the difference between an unconfined domain and a permissive domain? 2. How can we run applications in a very restricted domain? 3. How can we easily switch the domain in which a service will run? 4. Why do policies generated by sepolicy seemingly run without problems? 5. Why don't Linux distributions use the reference policy natively?