Summary
The reference policy is the most common source for SELinux policy development, and with years of development effort and maintenance, it has grown to be a full policy set with a vivid development community, and active support by various tools (including audit2allow, as well as the selint application).
We've learned how policies are generally structured, and how to start building SELinux policy modules for the most common use cases: application services, end user applications, and user roles. To help us in developing these policies, we've seen that selint can do code-style analysis, whereas some shell scripts can help us parse the interface files for quick help.
In our final chapter, we will look into CIL style SELinux development.
