r/voidlinux • u/r0man1a • 17d ago
SELinux on Void (experimental)
I have been working to get SELinux running under Void Linux for quite some time and I wanted to share my progress with you. Do note that this is still very experimental and should NOT be tested on a system that you rely on.
Where it's at currently:
- SELinux enabled kernel (7.1-selinux)
- Userspace tooling packaged (checkpolicy, libsemanage, policycureutils etc.)
- SELinux reference policy is loading up successfully via a runit stage-1 hook
The main limitation is that its currently permissive-only. Also the reference policy has no runit-specific domains yet.
if anyone finds this interesting and wants to help, send me a DM.
2
17d ago
[removed] — view removed comment
5
u/r0man1a 17d ago
SELinux supports OpenRC. I will start my work from there on.
1
u/PhilSwiftHereSamsung 12d ago
I can't seem to dm you but I'm definitely interested in helping test it, do you have a discord?
6
u/profeshamat 17d ago
As someone who doesn't have much experience with SELinux due to primarily using distros that use AppArmor, this is awesome and great work.