Package policycoreutils

SELinux policy core utilities

https://github.com/SELinuxProject/selinux

Security-enhanced Linux is a feature of the Linux® kernel and a number
of utilities with enhanced security functionality designed to add
mandatory access controls to Linux. The Security-enhanced Linux
kernel contains new architectural components originally developed to
improve the security of the Flask operating system. These
architectural components provide general support for the enforcement
of many kinds of mandatory access control policies, including those
based on the concepts of Type Enforcement®, Role-based Access
Control, and Multi-level Security.

policycoreutils contains the policy core utilities that are required
for basic operation of a SELinux system. These utilities include
load_policy to load policies, setfiles to label filesystems, newrole
to switch roles.

Version: 3.6

See also: policycoreutils-devel, policycoreutils-gui, policycoreutils-newrole, policycoreutils-python-utils, policycoreutils-restorecond, policycoreutils-sandbox.

General Commands

secon See an SELinux context, from a file, program or user input.

File Formats

selinux_config The SELinux sub-system configuration file.
sestatus.conf The sestatus(8) configuration file.

System Administration

fixfiles fix file SELinux security contexts.
genhomedircon generate SELinux file context configuration entries for user home directories
load_policy load a new SELinux policy into the kernel
restorecon restore file(s) default SELinux security contexts.
restorecon_xattr manage security.sehash extended attribute entries added by setfiles(8) or restorecon(8).
semodule Manage SELinux policy modules.
semodule_expand Expand a SELinux policy module package.
semodule_link Link SELinux policy module packages together
semodule_package Create a SELinux policy module package.
semodule_unpackage Extract policy module and file context file from an SELinux policy module package.
sestatus SELinux status tool
setfiles set SELinux file security contexts.
setsebool set SELinux boolean value