Exercises

1.	Describe some of the key benefits of the reference policy over the example policy.
2.	What is the primary goal of encapsulation within reference policy and how is it generally achieved?
3.	What is the difference between a module's .if and .te files? How are they similar?
4.	Which of the three kinds of module files are required or optional for a reference policy module?
5.	Explain when you might need to use a template interface rather than the much more common access interface.
6.	Assume the following is a modules.conf file. Describe how each module is built for both a monolithic policy and a loadable module policy.

          kernel = base           files = base           rpm = module           tftp = off           rpc = module           corenetwork = base           init = module