SELinux Policy Editor For Linux

SELinux Policy Editor (seedit) is a tool to make SELinux policies easy to apply. SELinux Policy Editor was originally developed by Hitachi Software.

SELinux Policy Editor is composed of Simplified Policy and tools. Simplified Policy is a policy described by Simplified Policy Description Language (SPDL) which hides the details of SELinux configurations by using name-based configration and reducing the number of permissions.

SELinux Policy Editor includes a GUI to generate SPDL so adminstrators do not have to remember syntax of the language. There are also command line tools in the package.

Following is example policy for Apache using SPDL. domain httpd_t; program /usr/sbin/httpd; allow /var/www/** r,s; allownet -protocol tcp -port 80 server;

As you see from the example type is not used. You can use file names and port numbers for configuration.

You can try SELinux Policy Editor on Fedora Core 5. It will not affect existing SELinux policies so it is possible to revert to the default SELinux easily.

Requirements:

· GTK+ version 2.2.x