Security-enhanced Linux is a feature of the Linux® kernel and a number
of utilities with enhanced security functionality designed to add
mandatory access controls to Linux. The Security-enhanced Linux
kernel contains new architectural components originally developed to
improve the security of the Flask operating system. These
architectural components provide general support for the enforcement
of many kinds of mandatory access control policies, including those
based on the concepts of Type Enforcement®, Role-based Access
Control, and Multi-level Security.
libsemanage provides an API for the manipulation of SELinux binary policies.
It is used by checkpolicy (the policy compiler) and similar tools, as well
as by programs like load_policy that need to perform specific transformations
on binary policies such as customizing policy boolean settings.
* Sun Apr 06 2025 Vit Mojzis <vmojzis@redhat.com> - 2.9-12
- improve performance of semanage store rebuild (RHEL-86057)
* Fri Jan 24 2025 Petr Lautrbach <lautrbach@redhat.com> - 2.9-11
- Set new restorecon handle before doing restorecon (RHEL-73348)
- Mute error messages from selinux_restorecon
* Mon Jul 29 2024 Vit Mojzis <vmojzis@redhat.com> - 2.9-10
- Preserve file context and ownership in policy store (RHEL-17509)
* Wed Jul 26 2023 MSVSphere Packaging Team <packager@msvsphere.ru> - 2.9-9
- Rebuilt for MSVSphere 8.8
* Thu Jul 07 2022 Vit Mojzis <vmojzis@redhat.com> - 2.9-9
- allow spaces in user/group names (#2042408)
- always write kernel policy when check_ext_changes is specified (#2089802)
* Tue Feb 22 2022 Vit Mojzis <vmojzis@redhat.com> - 2.9-8
- Bump release to get around OSCI issues
* Thu Feb 17 2022 Vit Mojzis <vmojzis@redhat.com> - 2.9-7
- Trivial style fixes
- Free contents of modkey in semanage_direct_remove
- Fix USE_AFTER_FREE (CWE-672) in semanage_direct_write_langext()
- add missing include to boolean_record.c
- move module hashing into libsemanage
- move compressed file handling into a separate object
- clean up semanage_direct_commit() a bit
- optionally rebuild policy when modules are changed externally
- add command-line option to detect module changes (#2049186)
* Mon Feb 01 2021 Petr Lautrbach <plautrba@redhat.com> - 2.9-6
- sync filesystem with sandbox (#1913224)
* Mon Dec 21 2020 Petr Lautrbach <plautrba@redhat.com> - 2.9-5
- Revert "genhomedircon: check usepasswd" (rhbz#1871786)
- semanage.conf - improve usepasswd=False explanation (rhbz#1871786)
- semanage.conf - expand list of ignoredirs (rhbz#1871786)
* Sun Nov 22 2020 Vit Mojzis <vmojzis@redhat.com> - 2.9-4
- genhomedircon: check usepasswd (rhbz#1871786)
