really? I don't mean understand how to apply a new label. I mean understand what the policies are and how they work, be able to create new ones that apply to yo

really? I don't mean understand how to apply a new label. I mean understand what the policies are and how they work, be able to create new ones that apply to you, and verify that the ones given to you by the distro are correct for your use. You're saying this is not hard to understand: https://github.com/SELinuxProject/refpolicy/blob/master/policy/modules/admin/su.if https://github.com/SELinuxProject/refpolicy/blob/master/poli... ? Otherwise you are blindly applying some black box.