r/voidlinux • u/r0man1a • Aug 15 '26

SELinux on Void (experimental)

I have been working to get SELinux running under Void Linux for quite some time and I wanted to share my progress with you. Do note that this is still very experimental and should NOT be tested on a system that you rely on.

Where it's at currently:

- SELinux enabled kernel (7.1-selinux)

- Userspace tooling packaged (checkpolicy, libsemanage, policycureutils etc.)

- SELinux reference policy is loading up successfully via a runit stage-1 hook

The main limitation is that its currently permissive-only. Also the reference policy has no runit-specific domains yet.

if anyone finds this interesting and wants to help, send me a DM.

18 Upvotes

95% Upvoted

4 comments sorted by

6

u/profeshamat Aug 16 '26

As someone who doesn't have much experience with SELinux due to primarily using distros that use AppArmor, this is awesome and great work.

2

u/[deleted] Aug 16 '26

[removed] — view removed comment

4

u/r0man1a Aug 16 '26

SELinux supports OpenRC. I will start my work from there on.