Module selabel 

SELinux security context labeling for filesystem trees.

This module implements SELinux policy parsing and file labeling functionality. It reads SELinux policy files (file_contexts, file_contexts.subs, etc.) and applies appropriate security.selinux extended attributes to filesystem nodes. The implementation uses regex automata for efficient pattern matching against file paths and types.

Structs

Policy 🔒

Constants

XATTR_SECURITY_SELINUX

The SELinux security context extended attribute name.

Functions

openat

Open a file in the composefs store, handling inline vs external files.

parse_config 🔒

process_spec_file 🔒

process_subs_file 🔒

relabel 🔒

relabel_dir 🔒

relabel_inode 🔒

relabel_leaf 🔒

selabel

Applies SELinux security contexts to all files in a filesystem tree.

strip_selinux_labels 🔒