Proposal: Improving SELinux <--> user interaction on Fedora - Kerneloops for SELinux

[Tom "spot" Callaway]

On Thu, 2008-07-17 at 13:42 -0400, Stewart Adam wrote:
> I was thinking of ways that Fedora could improve user <--> SELinux
> interaction, and I thought that creating a kerneloops-like plugin for
> setroubleshoot would be a good way to collect data about denials.
> Similar to kerneloops, this would allow for statistics on where
> denials occur most and that way the policy can be modified
> accordingly. Ultimately, this leads to a better user experience with
> Fedora. I took a quick look at the setroubleshoot plugin system and it
> shouldn't be too hard to get this started but some extra more help
> would be great.

Great! Do it! :)

Keep in mind that like kerneloops, someone should need to know
absolutely nothing about SELinux to use it.

~spot