Cfengine 3 and SELinux

• No native support in Cf3 for SELinux.

• I've added a bundle that enables/disables booleans and have used it on one machine; this is pretty trivial.

• File contexts and restorecon appear to be mainly controlled by plain old files in /etc/selinux/targeted/contexts/files, but there are stern warnings about letting libselinux manage them. However, this thread on the SELinux mailing list seems to say it's okay to copy them around.

• Puppet appears to be further ahead in this. This guy compiles policy files locally using Puppet; this other dude has a couple of posts on this. There are yet other other folks using Puppet to do this, and it would be worth checking them out as a source of ideas.

• I need to improve my collection of collective pronouns.