We can always maintain our own SELinux policy modules as well. To accomplish this, we either need to have at least a file with the
.te suffix (which stands for type enforcement) and optionally a file context (
.fc) file and interface (
.if) file or, when using the new policy format, a
.cil file. All these files need to have the same base name, which will be used as a module name later.
There are several formats in which SELinux policy modules can be written: