extending selinux targeted policy

From here (via here)

cat /var/log/audit/audit.log | audit2allow -m local > local.te
vim local.te
checkmodule -M -m -o local.mod local.te
semodule_package -o local.pp -m local.mod
semodule -i local.pp