In this hands-on workshop we will show how SELinux works and why policy is needed. Changes in RHEL 7.3 SELinux userspace introduced the Common Intermediate Language (CIL). We will write policy for a custom application in the current m4 macro language and then compare the same policy when written in CIL. Along with tips and tricks we will show the benefits of CIL and interaction with the new policy analysis tool.