I've been drinking with my linux friends and one guy said he is needed to be adviced to generate his own policy.

So, I adviced him label the file correctly and generate a policy.

But, I know it's sometimes hard for you to write a good policy.

When you know a boolean sets you have to know, you even don't have to genarate your own policy.

So, first thing you should know, is correct SELinux hierarchy.

Maybe you should read Mr.Dan Walsh's blog.... read more