I personally find if SELinux "just works" for the purposes then it is great. However if I want to integrate a third party software product into the existing pol

I personally find if SELinux "just works" for the purposes then it is great. However if I want to integrate a third party software product into the existing policies I don't know where to start with it. e.g. if I have a daemon xyzd that wants to write to a pid file and to its log file, and have read write access to its own data, how do I write a policy to confine it?