Altering security attributes under SELinux

It depends on the Mandatory Access Control system being used. Generally, there is a central control point. In SELinux on Red Hat, for example, it's controlled by the policy files in the /etc/selinux directory.