Security-enhanced Linux is a feature of the Linux® kernel that enhances security
for some utilities and is designed to add mandatory access control to Linux. Its
Linux kernel contains new architectural components that provide common support
for the enforcement of multiple mandatory access control policies, including the
concepts of Type Enforcement®, Role-based Access Control, and Multi-level Security.
libsemanage provides an API for manipulating SELinux binary policies.It is used
by checkpolicy and similar tools, as well as by programs like load_policy that
need to perform specific transformations on binary policies, such as customizing
policy boolean settings.
