Those are used by
semodule which is a tool used for managing SELinux policy modules.
Operations are basically installing/removing, upgrading or listing modules. You can also use
semodule to force a reload of policy without performing any other transaction.
semodule acts on module packages created by
semodule_package. Conventionally, these files have a
.pp suffix (policy package).
So policy modules are grouped on those lists then
SELinux modularization will combine them when the system boots into the active policy. This policy is then loaded into memory. The combined binary version of this loaded policy can be found under