selinux-knowledge-patch

Installation
SKILL.md

SELinux Knowledge Patch

Covers SELinux policy development features added after Claude's training cutoff.

Baseline knowledge: SELinux modes (enforcing/permissive/disabled), security contexts (user:role:type:level), booleans (setsebool/getsebool), basic policy management (semanage, semodule, restorecon), and audit2allow.

Quick Reference: CIL vs Kernel Policy Language

CIL (Common Intermediate Language) replaces M4-based .te/.if/.fc policy modules with S-expression syntax:

Kernel Policy CIL Equivalent Notes
attribute typeattribute Declares a type attribute
typeattribute typeattributeset Assigns types to an attribute
attribute_role roleattribute Declares a role attribute
allow allow Same syntax, S-expression form
module / require block / blockinherit Namespacing replaces module system

CIL eliminates M4 macro dependency and module load-ordering requirements.

Related skills
Installs
3
GitHub Stars
19
First Seen
Apr 7, 2026