list the actions selinux allows a process to use on the files in a directory