[ale] Creating a "simple" selinux file policy?

[mkachline at gmail.com (Mike Kachline)]

All,

  I am needing to create an selinux policy under RHEL5 which simply
logs any "reads" to a limited number of files from anyone. I am
somewhat familiar with selinux concepts, but, have never created or
modified a policy before. Thus my questions to the group:

* What is the best book for learning how to author simple selinux policies?

* Is the above need easy to do? I presume I need to use "semanage"?

* Can anyone offer any other tidbits of help?

  Thanks,
     - Mike


-- 
Mike Kachline
mkachline at gmail.com