Well SELinux has begun the long needed improvement in simplification this week. Tresys Technology (I used to work for them for about a year), has released two new tools to make SELinux Policy writing easier. They are both very early additions (consider them Beta), and they are opensource.

SELinux Policy Development IDE (SLIDE)

CDS Frameworkd IDE

The CDS IDE is more for a very targeted audience (If you don’t know what CDS means, it’s probably not a priority for you), but the other tools are a nice first step towards making Policy writing within the reach of mere mortals (and not just Policy gurus). There is still more work needed, but I think the people at Tresys know what is needed and are trying to get there in baby steps.