[PATCH 00/07][RFC] RACF audit plugin

[Steve Grubb]

On Friday 28 September 2007 17:09:20 Klaus Heinrich Kiwi wrote:
> On Fri, 28 Sep 2007 10:28:07 -0300, Klaus Heinrich Kiwi wrote:
> > TODO list:
> > ==========
> > - SELinux policy (currently, the plugin runs under the audit daemon
> > domain, which denies some network operations, for example)
>
> Steve,
>
>   you mentioned in an IRC chat that dwalsh has made a nice GUI tool for
> building new policy - can you point it out??

You need to have policycoreutils-gui package installed. In F7, bring up the SE 
Linux Administration tool in System | Administration. Select the Policy 
Module item in the left window pane, then click on New button in tool bar. 
This starts the druid. On rawhide/F8, I think its broken out as its own 
program in Applications | System Tools menu item.

Dan wrote a nice article about using this policy GUI tool here:

http://www.redhatmagazine.com/2007/08/21/a-step-by-step-guide-to-building-a-new-selinux-policy-module/ 

Have fun....

-Steve