/selinux

This is the upstream repository for the Security Enhanced Linux (SELinux) userland libraries and tools. The software provided by this project complements the SELinux features integrated into the Linux kernel and is used by Linux distributions. All bugs and patches should be submitted to selinux@tycho.nsa.gov.
  1. C 73.9%
  2. Python 16.3%
  3. Roff 5.5%
  4. Objective-C 1.4%
  5. Makefile 0.9%
  6. Yacc 0.8%
  7. Other 1.2%
C Python Roff Objective-C Makefile Yacc Other
Clone or download

Clone with HTTPS

Use Git or checkout with SVN using the web URL.

Download ZIP

Launching GitHub Desktop...

If nothing happens, download GitHub Desktop and try again.

Launching GitHub Desktop...

If nothing happens, download GitHub Desktop and try again.

Launching Xcode...

If nothing happens, download Xcode and try again.

Launching Visual Studio...

If nothing happens, download the GitHub extension for Visual Studio and try again.

Find file
Switch branches/tags
sepolgen-2.6 sepolgen-2.6-rc2 sepolgen-2.6-rc1 sepolgen-1.2.3 sepolgen-1.2.3-rc1 sepolgen-1.2.2 sepolgen-1.2.2-rc7 sepolgen-1.2.2-rc6 sepolgen-1.2.2-rc5 sepolgen-1.2.2-rc4 sepolgen-1.2.2-rc3 sepolgen-1.2.2-rc2 sepolgen-1.2.1 sepolgen-1.2 semodule-utils-2.7 semodule-utils-2.7-rc6 semodule-utils-2.7-rc5 semodule-utils-2.7-rc4 semodule-utils-2.7-rc3 semodule-utils-2.7-rc2 semodule-utils-2.7-rc1 selinux-sandbox-2.7 selinux-sandbox-2.7-rc6 selinux-sandbox-2.7-rc5 selinux-sandbox-2.7-rc4 selinux-sandbox-2.7-rc3 selinux-sandbox-2.7-rc2 selinux-sandbox-2.7-rc1 selinux-python-2.7 selinux-python-2.7-rc6 selinux-python-2.7-rc5 selinux-python-2.7-rc4 selinux-python-2.7-rc3 selinux-python-2.7-rc2 selinux-python-2.7-rc1 selinux-gui-2.7 selinux-gui-2.7-rc6 selinux-gui-2.7-rc5 selinux-gui-2.7-rc4 selinux-gui-2.7-rc3 selinux-gui-2.7-rc2 selinux-gui-2.7-rc1 selinux-dbus-2.7 selinux-dbus-2.7-rc6 selinux-dbus-2.7-rc5 selinux-dbus-2.7-rc4 selinux-dbus-2.7-rc3 selinux-dbus-2.7-rc2 selinux-dbus-2.7-rc1 secilc-2.7 secilc-2.7-rc6 secilc-2.7-rc5 secilc-2.7-rc4 secilc-2.7-rc3 secilc-2.7-rc2 secilc-2.7-rc1 secilc-2.6 secilc-2.6-rc2 secilc-2.6-rc1 secilc-2.5 secilc-2.5-rc1 restorecond-2.7 restorecond-2.7-rc6 restorecond-2.7-rc5 restorecond-2.7-rc4 restorecond-2.7-rc3 restorecond-2.7-rc2 restorecond-2.7-rc1 policycoreutils-2.7 policycoreutils-2.7-rc6 policycoreutils-2.7-rc5 policycoreutils-2.7-rc4 policycoreutils-2.7-rc3 policycoreutils-2.7-rc2 policycoreutils-2.7-rc1 policycoreutils-2.6 policycoreutils-2.6-rc2 policycoreutils-2.6-rc1 policycoreutils-2.5 policycoreutils-2.5-rc1 policycoreutils-2.4 policycoreutils-2.4-rc7 policycoreutils-2.4-rc6 policycoreutils-2.4-rc5 policycoreutils-2.4-rc4 policycoreutils-2.4-rc3 policycoreutils-2.4-rc2 policycoreutils-2.3 policycoreutils-2.3-rc1 policycoreutils-2.2.5 policycoreutils-2.2.4 policycoreutils-2.2.3 policycoreutils-2.2.2 policycoreutils-2.2.1 policycoreutils-2.2 mcstrans-2.7 mcstrans-2.7-rc6 mcstrans-2.7-rc5 mcstrans-2.7-rc4 mcstrans-2.7-rc3
Nothing to show
Fetching latest commit…
Cannot retrieve the latest commit at this time.
Permalink
Failed to load latest commit information.
checkpolicy selinux: Add support for the SCTP portcon keyword Mar 19, 2018
dbus dbus: build: follow standard semantics for DESTDIR and PREFIX Feb 14, 2018
gui gui/fcontextPage: Set default object class in addDialog Mar 1, 2018
libselinux libselinux,libsemanage: Replace PYSITEDIR with PYTHONLIBDIR Mar 17, 2018
libsemanage libsemanage/direct_api.c: Fix iterating over array Mar 19, 2018
libsepol libsepol: Prevent freeing unitialized value in ibendport handling Mar 19, 2018
mcstrans mcstrans: build: follow standard semantics for DESTDIR and PREFIX Feb 14, 2018
policycoreutils policycoreutils: build: follow standard semantics for DESTDIR and PREFIX Feb 14, 2018
python python/sepolgen: fix typo in PolicyGenerator Mar 8, 2018
restorecond restorecond: build: follow standard semantics for DESTDIR and PREFIX Feb 14, 2018
sandbox sandbox: build: follow standard semantics for DESTDIR and PREFIX Feb 14, 2018
scripts Fix release script Nov 16, 2016
secilc selinux: Add support for the SCTP portcon keyword Mar 19, 2018
semodule-utils semodule-utils/semodule_package: fix semodule_unpackage man page Feb 26, 2018
.gitignore restorecond: Add gitignore Nov 16, 2016
.travis.yml libselinux,libsemanage: Replace PYSITEDIR with PYTHONLIBDIR Mar 17, 2018
CleanSpec.mk Add empty top level Android.mk / CleanSpec.mk files Apr 16, 2015
Makefile build: setup buildpaths if DESTDIR is specified Feb 14, 2018
README libsepol: build: follow standard semantics for DESTDIR and PREFIX Feb 14, 2018

README 

Please submit all bug reports and patches to selinux@tycho.nsa.gov.
Subscribe via selinux-join@tycho.nsa.gov.

Build dependencies on Fedora:
yum install audit-libs-devel bison bzip2-devel dbus-devel dbus-glib-devel flex flex-devel flex-static glib2-devel libcap-devel libcap-ng-devel pam-devel pcre-devel python-devel setools-devel swig xmlto redhat-rpm-config

To build and install everything under a private directory, run:
make DESTDIR=~/obj install install-pywrap

To install as the default system libraries and binaries
(overwriting any previously installed ones - dangerous!),
on x86_64, run:
make LIBDIR=/usr/lib64 SHLIBDIR=/lib64 install install-pywrap relabel
or on x86 (32-bit), run:
make install install-pywrap relabel

This may render your system unusable if the upstream SELinux userspace
lacks library functions or other dependencies relied upon by your
distribution.  If it breaks, you get to keep both pieces.

To install libsepol on macOS (mainly for policy analysis):
cd libsepol; make PREFIX=/usr/local install

This requires GNU coreutils (brew install coreutils).