So far, all we've looked at is what happens when we have an incorrect SELinux type set on a file and what to do to set the correct type. Another problem we may have would comes about if we need to allow an action that is prohibited by the active SELinux policy.