The SELinux coloring book

YUMMY!

DELICIOUS!

DOG_CHOW:FOOD

DOG

CAT_CHOW:FOOD

CAT

With these rules the kernel would allow the cat process to eat food labeled
cat_chow and the dog to eat food labeled dog_chow.