Err.. what about running SEL in permissive mode? The process works, and you'll get a nice log file filled with what would have gotten blocked. It's invaluable

Err.. what about running SEL in permissive mode? The process works, and you'll get a nice log file filled with what would have gotten blocked. It's invaluable in setting up new policies.