selinux-knowledge-patch
Installation
SKILL.md
SELinux Knowledge Patch
Read the relevant reference before changing SELinux policy, relabeling a filesystem, configuring container confinement, enabling a distribution policy, or administering MLS. Policy availability, boot activation, relabel behavior, and MLS recovery paths differ materially by platform and policy type.
Reference index
| Reference | Topics |
|---|---|
| Userspace tools and relabeling | Removed interfaces, secilcheck, CIL conversion, xperms, restorecon, setfiles, restorecond, mcstrans, and build workflow |
| Container policy | Udica templates, Incus, overlay transitions, ptrace control, nested containers, and confined identities |
| RHEL MLS | MLS activation, SSH administration, clearances, secure terminals, file sensitivity, and separation of duties |
| Distribution policy and activation | openSUSE defaults, SLE Micro policy and relabeling, SLES policy availability, and boot selection |