Full auditing in audit deamon could be useful e.g. to identify which object on system has too tight rules and object is causing dac_override SELinux
Why do you see DAC_OVERRIDE SELinux denials?
Hello everyone! You could have seen SELinux denials (AVC messages) in your system in the recent release of Fedora 28 and of course Fedora Rawhide.
Newest SELinux policy every day!
SELinux policy for Fedora Rawhide and Fedora 27 is changing very dynamically and new rules are appearing in SELinux policy repositories almost every day. New
No more massive patches in selinux-policy rpm package
Hi SELinux folks, Building selinux-policy rpm package was quite complicated and confusing for developers because of massive patches against Tresys reference base and contrib repositories.
Using rpm macros in product SELinux subpackages
Some time ago, I published a post about shipping custom SELinux modules together with product as rpm subpackage. One of the steps in shipping custom
Shipping custom module using SELinux priorities
Hello everyone! Some time ago I introduced first part of shipping own custom module with rpm package of your application. This solution allows you to
Creating local module quickly in CIL!
Welcome! Today, I’ll show you how to create local policy module for testing purposes or workaround while issue will be fixed in our distro selinux-policy.
How to modify SELinux module from distro policy?
Hi! Today, I’ll show you how to modify SELinux module from distro policy without rebuilding whole selinux-policy rpm package. This can be useful during testing
See you on Flock2016!
Hello SELinux enthusiasts! On Flock conference, me and Mirek Grepl will talk about shipping own SELinux modules for your service and show you SELinux power
Trouble with custom SELinux modules
Hello Everyone! I’m here with second part of series on how to create a custom SELinux policy rpm package. In this part I’ll show disadvantages