Skip to content

Home

Jump to bottom
Stephen Smalley edited this page Jun 20, 2025 · 13 revisions

SELinux Userspace

This is the wiki for the upstream repository for the Security Enhanced Linux (SELinux) userspace libraries and tools. Information on how to contribute, how to fix policy problems, other SELinux resources, and userspace releases can all be found here. A separate wiki exists for the SELinux kernel.

The software provided by this project complements the SELinux features integrated into the Linux kernel and is used by Linux distributions. The tools provide the following capabilities:

  • Policy compilation - low-level tools that perform the conversion of the text-based SELinux policy language into the format used by the kernel for enforcement.

  • Policy management - tools (e.g., semodule and semanage) and libraries (e.g., libsemanage) used to install, remove, and update SELinux policies on running systems.

  • Policy development - tools to aid in the debugging and generation of policies (e.g., audit2why, audit2allow, sepolgen).

  • SELinux services - libraries (e.g., libselinux) for applications that must be aware of SELinux or enforce access control decisions using SELinux (e.g., D-Bus, systemd).

  • SELinux utilities - low-level utilities (e.g., setenforce and restorecon) for administering and using SELinux-enabled system.

The software can be obtained as tested releases or from the development repository

Clone this wiki locally