Lessons learned from writing SELinux policy for Foreman and Katello projects. Who should write it at first? Where to start? How to form rules? Where to get help? Should I test in permissive or enforcing? And what about deployment? After this talk, you won't make the same mistakes as I did. Beginner for beginners series.