Package policycoreutils
SELinux policy core utilities
https://github.com/SELinuxProject/selinux
Security-enhanced Linux is a feature of the Linux® kernel and a number
of utilities with enhanced security functionality designed to add
mandatory access controls to Linux. The Security-enhanced Linux
kernel contains new architectural components originally developed to
improve the security of the Flask operating system. These
architectural components provide general support for the enforcement
of many kinds of mandatory access control policies, including those
based on the concepts of Type Enforcement®, Role-based Access
Control, and Multi-level Security.
policycoreutils contains the policy core utilities that are required
for basic operation of a SELinux system. These utilities include
load_policy to load policies, setfiles to label filesystems, newrole
to switch roles.
Version: 3.7
See also: policycoreutils-devel, policycoreutils-gui, policycoreutils-newrole, policycoreutils-python-utils, policycoreutils-restorecond, policycoreutils-sandbox.
General Commands | |
secon | See an SELinux context, from a file, program or user input. |
File Formats | |
selinux_config | The SELinux sub-system configuration file. |
sestatus.conf | The sestatus(8) configuration file. |
System Administration | |
fixfiles | fix file SELinux security contexts. |
genhomedircon | generate SELinux file context configuration entries for user home directories |
load_policy | load a new SELinux policy into the kernel |
restorecon | restore file(s) default SELinux security contexts. |
restorecon_xattr | manage security.sehash extended attribute entries added by setfiles(8) or restorecon(8). |
semodule | Manage SELinux policy modules. |
semodule_expand | Expand a SELinux policy module package. |
semodule_link | Link SELinux policy module packages together |
semodule_package | Create a SELinux policy module package. |
semodule_unpackage | Extract policy module and file context file from an SELinux policy module package. |
sestatus | SELinux status tool |
setfiles | set SELinux file security contexts. |
setsebool | set SELinux boolean value |