I tried to define a "private" subdirecory under my $HOME directory on which access for some programs (eg. firefox, thunderbird, ...) is denied (or alternatively access to only certain programs (eg. gedit, libreoffice, ...) is allowed).
What selinux rule could I do this? (I'm using Fedora 23)
PS: For server admins SELinux might be great but for dumb linux users like me SELinux is a miracle and not (easily) adaptable to users requirements. With apparmor in contrast this could be done easily without headache.