[SOLVED] Creating custom SELinux roles and permissions on CentOS 5.5

[Freston]

Somehow I can't figure this out. It should be relatively easy when I read generic documentation on SELinux, or documentation on Fedora or Red Hat/CentOS v4.x
But for CentOS 5.5 things appear to work differently.


What I want is to create users with very restricted access to the system. Let's say they may only run bin_t commands.

So I thought I'd create a new SELinux user to map to these restricted users. Lets call it untrusted_u
Then give these untrusted_u a role on the system: untrusted_r

So you'd get something like this:

user untrusted_u roles { untrusted_r }
role untrusted_r types { bin_t }

But how? And where?

I'd be very grateful for anything that gets me in the right direction... something like this is excellent, but I have no idea how to translate it to CentOS 5.5 specific settings and configuration