Arthur Pemberton wrote:
On 9/21/07, Beartooth <Beartooth@xxxxxxxx> wrote:
Suggestion : persuade the SELinux developers, if you can, to go
take lessons from the ZoneAlarm people, paying heavily enough to get
eager co-operation. ZA is by no means perfect -- it too can be obscure --
but on any scale of user-friendliness, it's orders of magnitude (plural!)
ahead of the SELinux messages.
The SELinux devs have created apps which all but automate fixing of
most SELinux problems for you. And, they have made it really easy to
turn off. So I don't know more you want other than more and better
rules, and possible a GUI rule builder.
There is already one FYI
See
http://www.redhatmagazine.com/2007/08/21/a-step-by-step-guide-to-building-a-new-selinux-policy-module/
Rahul
