SELinux
Deep reference for SELinux: DAC vs MAC, security contexts, enforcing/permissive modes, file contexts, booleans, policy modules, port labeling, denial analysis with audit tooling, relabeling, and container volume labels.