Decentralized SELinux policy project (DSP) is here to help developers ship custom SELinux policies together with their components. This allows for each package to be tested and delivered to users together with tailor-made security policy (as opposed to waiting for a new release of distribution policy). In this talk I will show you what this process entails, list pros and cons, and explain how it influences the rest of the system. The newest addition to DSP is a test suite aimed at secure policy writing and proper packaging practises.
Video Stream