5.9.2. Changing the Default Context
As mentioned in
Section 5.8, “The file_t and default_t Types”, on file systems that support extended attributes, when a file that lacks an SELinux context on disk is accessed, it is treated as if it had a default context as defined by SELinux policy. In common policies, this default context uses the
file_t
type. If it is desirable to use a different default context, mount the file system with the
defcontext
option.