using selinux to control user access to files

[Hein Coulier]

hi, newby speaking here (totally lost in the selinux labyrinth).

What i want to accomplish with selinux is the following : i want to allow
different end-users (with different roles) to do something with some files.
I'll give you an example :

fileA : may be read by roleA and roleB
fileB : may only be read by roleB ; audited
fileC : may be read and changed by roleB ; audited

I read several pdf's, read the o'reilly book, but i seem to be unable to
achieve my goal.
Help would be appreciated.

tia, hecou.