On Mon, Mar 12, 2012 at 08:15:50PM -0400, Alain Toussaint wrote: > In the end, this is no longer apropos (for now) because I transferred all > my mail setup to google apps for business but I got a new spare computer > which I will use for R&D of a numbers of projects including developing > policy files for selinux. > > Do you have some project for which I could help develop policy files? This > will be a good way for me to learn selinux.
Developing policies isn't a good way to start learning SELinux. It is about using, finding out in which logs files to find information, and what the log entries tell you. Understanding SELinux and its denials is needed before you can build policies. Otherwise your policy will most likely not pass the mustard... But I'm not going to stop you from contributing if you want ;-) On our bugzilla, there is a requests for a policy for miniupnpd. But there are probably other applications or services that we offer that still do not have a proper policy with it (after all, we have about 230 policy modules whereas there are several thousand packages in our tree... Wkr, Sven Vermeulen