1. Why doesn't the regular SELinux subsystem govern Xen guests? 2. How are labels assigned to Xen guests? 3. What are the common Xen commands that deal with XSM labels? 4. How can administrators load...

1. Why doesn't the regular SELinux subsystem govern Xen guests? 2. How are labels assigned to Xen guests? 3. What are the common Xen commands that deal with XSM labels? 4. How can administrators load a custom policy for testing purposes? 5. Why is Docker or podman preferred over machinectl for SELinux? 6. How do we ensure host data is properly mapped within a container? 7. How can we create a custom policy from a container definition? 8. Where in Kubernetes' manifests can we place SELinux settings?