SELinux Reference Policy 3 Design Documents domains.md has design details for domains. files.md has design details for file-like objects.