Policycoreutils

Policycoreutils is a collection of userland utilities that provide management and inspection capabilities for SELinux policies on Linux systems. It encompasses tools used to load, modify, and analyze SELinux policy modules, manage policy booleans and other policy settings, and label or relabel files according to their SELinux contexts. The package is a core component of the SELinux policy tooling stack and is widely included in distributions that ship SELinux.

Core functionality includes loading and removing policy modules, querying the policy for jurisdictional information, and updating policy stores. It also provides utilities for labeling files and directories consistently with the policy, such as commands that set or restore file contexts and contexts for new files. In addition, policycoreutils offers mechanisms to generate or refine policy based on observed AVC denials via audit logs, and to adjust boolean controls that enable or disable policy features.

Administrators use policycoreutils to tune SELinux behavior, perform policy debugging, and maintain system security posture. The tools are commonly executed from the command line and are designed to operate with the policy in enforcing or permissive modes.

The software is distributed under open-source licenses as part of standard Linux distributions that implement SELinux.