https://github.com/topjohnwu/selinux

This is the upstream repository for the Security Enhanced Linux (SELinux) userland libraries and tools. The software provided by this project complements the SELinux features integrated into the Linux kernel and is used by Linux distributions. All bugs and patches should be submitted to [email protected].
https://github.com/topjohnwu/selinux

Last synced: 17 days ago
JSON representation

This is the upstream repository for the Security Enhanced Linux (SELinux) userland libraries and tools. The software provided by this project complements the SELinux features integrated into the Linux kernel and is used by Linux distributions. All bugs and patches should be submitted to [email protected].

• Host: GitHub
• URL: https://github.com/topjohnwu/selinux
• Owner: topjohnwu
• License: other
• Created: 2016-09-07T19:59:12.000Z (about 8 years ago)
• Default Branch: master
• Last Pushed: 2024-03-19T09:52:47.000Z (8 months ago)
• Last Synced: 2024-10-14T20:56:33.792Z (about 1 month ago)
• Language: C
• Homepage:
• Size: 16.3 MB
• Stars: 122
• Watchers: 19
• Forks: 38
• Open Issues: 0
• Metadata Files:
  • Readme: README.android
  • Contributing: CONTRIBUTING.md
  • License: LICENSE
  • Security: SECURITY.md

Awesome Lists containing this project

README

        
This fork of Android differs in the following ways:

 - README.android

 - All Android.mk and Android.bp files

 - ALL MODULE_LICENSE_* files

 - libselinux/include/selinux/android.h

 - libselinux/src/android/android.c

All other changes should be upstreamed to selinux as

Android no longer carries changes outside of those files.

The upstream project can be found at:

https://github.com/SELinuxProject/selinux

Thus, since all changes are in separate files, updates merged from

upstream should occur with no merge conflicts.

This fork differs from upstream libselinux in at least the following ways:

* The Android fork omits compiling many of the src files and specifies

  custom build configurations. The exact details, are encoded in the

  Android.bp and Android.mk files.

* The SELinux policy files are all located in / rather than under

  /etc/selinux since /etc is not available in Android until /system

  is mounted and use fixed paths, not dependent on /etc/selinux/config.

* The kernel policy file (sepolicy in Android, policy.N in Linux) does

  not include a version suffix since Android does not need to support

  booting multiple kernels.

* The policy loading logic does not support automatic downgrading of

  the kernel policy file to a version known to the kernel, since this

  requires libsepol on the device and is only needed to support mixing

  and matching kernels and userspace easily.

* restorecon functionality, including recursive restorecon, has been

  been upstreamed as selinux_restorecon(), but there are residual

  differences between it and selinux_android_restorecon().

* Support for seapp_contexts, a new Android-specific SELinux

  configuration file has been added within android.c.