order of rules?

["Stanisław T. Findeisen"]

Please tell me if the following is correct about resource access in SELinux:

(1) everything is denied by default
(2) administrator can add "allow" rules
(3) SO, there is nothing about "rule chains", like in iptables. There is 
just rule SET. In other words, order of rules is not significant.

True or false?

Thanks.

-- 
     "Serce medrcow jest w domu zaloby,
      a serce glupcow w domu wesela."     (Koh 7:4)