Releases from the SELinux userspace project are in the form of source tarballs. For binary packages please refer to your distribution. The sha256sum output for each tarball is provided below.

Release Notes

full log

short log

checkpolicy-3.2-rc1.tar.gz 9b0f2a01ea2e554cf0392e6a59ed45a863d9744a04db1f6f2fddfaf80758d1bb

libselinux-3.2-rc1.tar.gz 0177ca83182d96c819f090ad219713c418d4acfcf0e088840672c7cf3ebe8010

libsemanage-3.2-rc1.tar.gz 06065d0c90dbb8cc1d549d8a98cfea07af7dd8494e53362321cbd06ff4ade134

libsepol-3.2-rc1.tar.gz 9a591f18d761ceeff979c2b69ac70c09a32a594125cf20645f132f1fbbf4b7a2

mcstrans-3.2-rc1.tar.gz 22623708c057610a968fc2bba80698e0793cc1fc232c2766b84f984fffa248e6

policycoreutils-3.2-rc1.tar.gz 33f84e3f37bc4adde468dac7855382385c2b5a3bb40775d5202fddfb43391738

restorecond-3.2-rc1.tar.gz cb3654472ce6ab4fd7d340e95b293eec5361c9b5bf7e7f6ba75414e8e7896b70

secilc-3.2-rc1.tar.gz 0c6587a18ea69ba8e1bd7b096dcf47b84822bdc92736341eed664e29394ddf1f

selinux-dbus-3.2-rc1.tar.gz f0f4af5bb93f4fe34787ac63572e52e82c90538052fa8b49ba2389d495e11731

selinux-gui-3.2-rc1.tar.gz 0d8eb84cf295c47621e115ba7d1268a52dc3007544c3c59ac73f42ef05f3d83b

selinux-python-3.2-rc1.tar.gz 052516fe69be6429826afdd51664e8ede9c4fbe5714411f3f0f671be538c4149

selinux-sandbox-3.2-rc1.tar.gz 271318d875ad8341c445c50b61653e2efd6f12cab53dcb992cddfeaaaf255f59

semodule-utils-3.2-rc1.tar.gz 00f3aa31f093bcf75e9305af26106fd9df73f7ed63c92f80150dec614c397b1d

selinux-3.2-rc1.tar.gz 03de70a4478d4c0c44935eb673bba8d2af3cfcc772579d990b9b8d6e84fd369e

Release Notes

full log

short log

checkpolicy-3.1.tar.gz dfc7707070520c93b14fbbdfdbe081364d806bf28e3e79e10318c2594c77bbb2

libselinux-3.1.tar.gz ea5dcbb4d859e3f999c26a13c630da2f16dff9462e3cc8cb7b458ac157d112e7

libsemanage-3.1.tar.gz 22d6c75526e40d1781c30bcf29abf97171bdfe6780923f11c8e1c76a75a21ff8

libsepol-3.1.tar.gz ae6778d01443fdd38cd30eeee846494e19f4d407b09872580372f4aa4bf8a3cc

mcstrans-3.1.tar.gz cc918576c17340fc944849d785e2a7400b269ef079a36b871c140504164d6a45

policycoreutils-3.1.tar.gz c889f62ee80f8b6a369469a9b8af51f5b797975aeaa291f5c5960cc12eed1934

restorecond-3.1.tar.gz 82ca45099685a45d718f11f8859963c1ba83d98e510312cbf0b7dc5664c60ad0

secilc-3.1.tar.gz 86117246fec3017af710a9ff7c1dae3ed1cd571e232a86cff3e2a3de2d6aa65c

selinux-dbus-3.1.tar.gz 61f936d200ff8302c513883c67bb7c4c496513e78122954cbd33db62086a06f2

selinux-gui-3.1.tar.gz 40775eaef965259ca2f8ad49c23b03ff2c8f70808a9e0587b1075970b2509c3d

selinux-python-3.1.tar.gz f4d0a1a030bc291a6af498b26e0676b745075dd289a8ba16cdec86c3ea8f2f02

selinux-sandbox-3.1.tar.gz c79b958e2f64570a59e60638fd13c15fd77c7c2bbac31c7ad4afb03718432b84

semodule-utils-3.1.tar.gz 0cc37f9cec751d9c2abb5f2b228b060567e973cb47c19b53b8a4a7378baaa853

Release Notes

full log

short log

checkpolicy-3.0.tar.gz c88c719a141dd5c1202d49c378c7f063349d630522d5e04dc6e0c53da81aa4f8

libselinux-3.0.tar.gz 2ea2b30f671dae9d6b1391cbe8fb2ce5d36a3ee4fb1cd3c32f0d933c31b82433

libsemanage-3.0.tar.gz a497b0720d54eac427f1f3f618eed417e50ed8f4e47ed0f7a1d391bd416e84cf

libsepol-3.0.tar.gz 5b7ae1881909f1048b06f7a0c364c5c8a86ec12e0ec76e740fe9595a6033eb79

mcstrans-3.0.tar.gz 0992b8e7c4de1ba5f98a82547b02418370be5a5f588fc6d5f1cd2c7824bda87e

policycoreutils-3.0.tar.gz 3379c9bd722e36be9bf8856c6fa373bfa9b33305ac9da5fc807cfe7fa605f489

restorecond-3.0.tar.gz 32a92c9f4bf48c613f9f467ced58d8c369eec8892239cd44d5d0e139b41926dc

secilc-3.0.tar.gz 78fafc4a8a8a212663d3d1e181047f5605430f0a0577ff772a4bb7fecd2b42b0

selinux-dbus-3.0.tar.gz 95d75603444c3eeaebf25da3de6febb6e1567d5f5d93cde5a4b73c88ef6c4f28

selinux-gui-3.0.tar.gz e9e9b599950a30857b0954bf10853ea50efb7de68a5ae756a27b8d03ccc44348

selinux-python-3.0.tar.gz 43c08fa881ccc64251d396b1ac6c56b354bf98421b4ec937d54a8db190135494

selinux-sandbox-3.0.tar.gz 66fb4ea3a9e3d1e6004f13666b8390be751dd226a8496b995ed0332788758d0a

semodule-utils-3.0.tar.gz 14ee2db21f36766ffbbb65770f8e7236d21675db9f0f5d40f50974711da598cf

Release Notes

full log

short log

checkpolicy-2.9.tar.gz a946c32b284532447857e4c48830f8816867c61220c8c08bdd32e6f691335f8e

libselinux-2.9.tar.gz 1bccc8873e449587d9a2b2cf253de9b89a8291b9fbc7c59393ca9e5f5f4d2693

libsemanage-2.9.tar.gz 2576349d344492e73b468059767268dec1dabd8c35f3c7222c3ec2448737bc1c

libsepol-2.9.tar.gz a34b12b038d121e3e459b1cbaca3c9202e983137819c16baf63658390e3f1d5d

mcstrans-2.9.tar.gz 7eddce6ffefc9a26340f2720ba9afd7d041a31569844842d0199bfe27c5efb19

policycoreutils-2.9.tar.gz c53c344f28007b3c0742bd958751e9b5d2385898adeb8aec6281ae57342f0f7b

restorecond-2.9.tar.gz cbf9820583e641ee0462fa7bc89e6024676af281e025703e17b2d019b1a25a4f

secilc-2.9.tar.gz 73a1806e33a669e23545da2d35d0e5038714721f6bf71974eaa533b3ebde61b2

selinux-dbus-2.9.tar.gz ac54cecdea6a88b4a818981ac82654d054a3c5232b1b282ebf7418c3e350cc7a

selinux-gui-2.9.tar.gz bbd9e1799cc0c22d64c815c3033a54393f6f84947ff2841a4df60ded5eee0510

selinux-python-2.9.tar.gz 3650b5393b0d1790cac66db00e34f059aa91c23cfe3c2559676594e295d75fde

selinux-sandbox-2.9.tar.gz 01915f57f08642751dea550a87f82a6f2fcec754be48dcfa28266c14bd044262

semodule-utils-2.9.tar.gz 8083679ee634570f6e9a18632f2c2862b9134fa308b689b2e1952a369ae5d907

Release Notes

full log

short log

checkpolicy-2.8.tar.gz 9dec811c24b88e58c3bf741365eacf1dbb945531a2fcb8f284aacf68098194c8

libselinux-2.8.tar.gz 31db96ec7643ce10912b3c3f98506a08a9116dcfe151855fd349c3fda96187e1

libsemanage-2.8.tar.gz 1c0de8d2c51e5460926c21e371105c84a39087dfd8f8e9f0cc1d017e4cbea8e2

libsepol-2.8.tar.gz 3ad6916a8352bef0bad49acc8037a5f5b48c56f94e4cb4e1959ca475fa9d24d6

mcstrans-2.8.tar.gz ec6ea65660550ed6bbd2a834725ba7526ac53599753d7b95072e4afd4afc14e4

policycoreutils-2.8.tar.gz 986553a235f27bee7ad7c2b7c35ea51eb2ee68e2cf03b661b1585de101bc1099

restorecond-2.8.tar.gz 323cab1128e5308cd85fea0e5c98e3c8973e1ada0b659f2fce76187e192271bf

secilc-2.8.tar.gz cfe15f2e06b3013c9dfc46cf42234ff07fb61866c4c29d739eb8858f83b214d4

selinux-dbus-2.8.tar.gz 3339cb9cd77579bab6158afc054409c3bf952e282ef957ea732b19c9f4697bc6

selinux-gui-2.8.tar.gz 17acd3004f01f92b288cc1322317d7964f5039fb26ba1542b6713a7147a2351d

selinux-python-2.8.tar.gz e69f5e24820cb247a3d881a9c90efba1e64d76af863c82fb81bc3b87ed71e238

selinux-sandbox-2.8.tar.gz 025f84f76e07b7bfc9ba1e9215f4ddb646d41a2e935a65e07560feaa6fc20ef3

semodule-utils-2.8.tar.gz 44f59c13070c637440b143ceab4dfe1efb9018b1e47828dd8789def74c1ccadf

Release Notes

full log

short log

checkpolicy-2.7.tar.gz 5413479f1dcde866c19896b4dbfec315d822aa431606e1d03c944408984c3201

libselinux-2.7.tar.gz d0fec0769b3ad60aa7baf9b9a4b7a056827769dc2dadda0dc0eb59b3d1c18c57

libsemanage-2.7.tar.gz 07e9477714ce6a4557a1fe924ea4cb06501b62d0fa0e3c0dc32a2cf47cb8d476

libsepol-2.7.tar.gz d69d3bd8ec901a3bd5adf2be2fb47fb1a685ed73066ab482e7e505371a48f9e7

mcstrans-2.7.tar.gz cdca003282d160b50ad695ab5b013c05ca21387a419b2f89288534184d16e1e2

policycoreutils-2.7.tar.gz 0a1b8a4a323b854981c6755ff025fe98a0f1cff307f109abb260f0490f13e4f4

restorecond-2.7.tar.gz cb8e0a8d706cb2c1f105125f3514dffffefcbcfb49199183a7f91ab0bdf1f24d

secilc-2.7.tar.gz 9ec63dd64645c718f66d33c96299adfe0445b0aa62d7ac8c642f873c570609c5

selinux-dbus-2.7.tar.gz a7f3dbe68c0d02cd1cbe6aac06e87c2957668cb88083389654fabacb79641ae4

selinux-gui-2.7.tar.gz 693fb3347041b5a2273c52c33be0a256b109e60f2039ae1d7e90ba8a2ec0324f

selinux-python-2.7.tar.gz 4217cb965ecda96c91e15ffcc2e7ddd13ecc2bf5631100f3cd072a7616f140ed

selinux-sandbox-2.7.tar.gz 9490620380ab6d428a92869002a51ada0343ca35fa2a6905595745902a64c541

semodule-utils-2.7.tar.gz 90c98b3362a43b4da2a51a9176820a56f3e615225e23e3395bc566c4490786ba

checkpolicy-2.6.tar.gz 0bebd18688ca8027b1b3b4ff1532c0626f1fe49883ae6cb74d9d385940e74157

libselinux-2.6.tar.gz 4ea2dde50665c202253ba5caac7738370ea0337c47b251ba981c60d24e1a118a

libsemanage-2.6.tar.gz 4f81541047290b751f2ffb926fcd381c186f22db18d9fe671b0b4a6a54e8cfce

libsepol-2.6.tar.gz d856d6506054f52abeaa3543ea2f2344595a3dc05d0d873ed7f724f7a16b1874

policycoreutils-2.6.tar.gz 68891b376f5048edc53c6ccb2fca44da3dc7f4563f4b6894e201d70c04a05a29

secilc-2.6.tar.gz a84838c15bb7b0141238b48294b15ff0e1618107f547541a0067d1ddabcc9502

sepolgen-2.6.tar.gz 6a327b1576d914e57ad796a541a7a9bcceefb14c445355559993de0fdb8e7a60

checkpolicy-2.5.tar.gz 33af9f3eb19135a7e6536ecd3fbb9686323000016cd51eb88346346ed7546001

libselinux-2.5.tar.gz 94c9e97706280bedcc288f784f67f2b9d3d6136c192b2c9f812115edba58514f

libsemanage-2.5.tar.gz 46e2f36254369b6e91d1eea0460c262b139361b055a3a67d3ceea2d8ef72e006

libsepol-2.5.tar.gz 2bdeec56d0a08b082b93b40703b4b3329cc5562152f7254d8f6ef6b56afe850a

policycoreutils-2.5.tar.gz 329382cfe9fa977678abf541dcd8fe3847cf0c83b24654c8f7322343907078a1

secilc-2.5.tar.gz 4303d911c06ee5c207e00f778ca786c1a6efa2554a562f5d014dbc0d2f4cc4a4

sepolgen-1.2.3.tar.gz 3ee1745257fa55301070219c77978c7c9eeb9aa595ce0b6b29c3baa4687d5cf0

This release includes a change of location of the SELinux module store, which now defaults to /var/lib/selinux/. Updating to this release requires migrating the old policy store to this new location before policy can be managed with tools like semanage and semodule. Detailed information about the migration process is available on the Policy Store Migration wiki page.

checkpolicy-2.4.tar.gz 9bbdac28a88de4c405c769730863f3adcd266adbfa45881a5de67e3a4895bcd4

libselinux-2.4.tar.gz 46043091f4c5ba4f43e8d3715f30d665a2d571c9126c1f03945c9ea4ed380f7b

libsemanage-2.4.tar.gz 1a4cace4ef16786531ec075c0e7b2f961e2fee5dc86c5f983a689058899a6484

libsepol-2.4.tar.gz 299015d59932404c6b69d365fdecffe5c0e2f9c44e08b47286a4bfc02ee49659

policycoreutils-2.4.tar.gz b819f876f12473783ccce9f63b9a79cd77177477cd6d46818441f808cc4c3479

sepolgen-1.2.2.tar.gz bebda8eeb2d386d26823d724ea320508a02b50828d44aff47c3f907cf54c2324

checkpolicy-2.3.tar.gz 90632d11afecb66997971d4c5c5d70dfb02d3969ec610ee2918ba6df99c8207b

libselinux-2.3.tar.gz 0b1e0b43ecd84a812713d09564019b08e7c205d89072b5cbcd07b052cd8e77b2

libsemanage-2.3.tar.gz 03e09e35e611c286e446bef92b6023ef2623815996f5a53394bb02e49a312e4b

libsepol-2.3.tar.gz cc8d8642c3b7b95d6928d65dcbca2ab0627abc1c05166637851e63c1a6eae68f

policycoreutils-2.3.tar.gz 864cfaee58b5d2f15b140c354e59666e57143293c89f2b2e85bc0d0e4beefcd2

sepolgen-1.2.1.tar.gz 438c246bdc6b3cf1b12116831f4c601aaae6e93decb007dddab212a3c88781b0

Updated on 2013-12-30 with libselinux-2.2.2 bug fix update.

Updated on 2013-12-09 with policycoreutils-2.2.5 bug fix update.

Updated on 2013-11-26 with policycoreutils-2.2.4 bug fix update.

Updated on 2013-11-13 with policycoreutils-2.2.3 bug fix update.

Updated on 2013-11-06 with policycoreutils-2.2.2 and libselinux-2.2.1 bug fix updates.

Updated on 2013-10-31 with policycoreutils-2.2.1 and sepolgen-1.2.1 bug fix updates.

Changes in this release include:

• checkpolicy: Support space and colon in filenames.
• libselinux: Add selinux_set_policy_root, selinux_systemd_contexts_path, selinux_current_policy_path interfaces.
• libselinux: Fix avc_has_perm() returns -1 even when SELinux is permissive.
• libselinux: Mount sysfs before trying to mount selinuxfs.
• libselinux: Support udev-197 and higher.
• libsemanage: Add audit support.
• libsemanage: Apply a MAX_UID check for genhomedircon.
• libsepol: Allow constraint denial cause to be determined (policy version 29).
• policycoreutils: Extend audit2why to report constraint denial cause.
• policycoreutils: Replace genhomedircon script with link to semodule.
• policycoreutils: Add sepolicy and semanage tests.
• policycoreutils: Many improvements to sepolicy, semanage, and gui.
• sepolgen: Return constraint denial cause information, add support for file name transitions.
• All: Man page fixes/updates and Makefile improvements.

checkpolicy-2.2.tar.gz 9ff6698f4d4cb59c9c916e348187d533ada4107f90c253ef7304905934e9adf8

libselinux-2.2.2.tar.gz 30ab363416806da907b86b97f1d31c252473e3200358bb1570f563c8312b5a3e

libsemanage-2.2.tar.gz 11f60bfa0f1c6063cd9bd99ce0cb4acc9d6d9e9b8d7743d39e847bcd7803bd75

libsepol-2.2.tar.gz 77a4b27006295805bdbd7f240038cb32a49be1d60847d413899501702933fc0f

policycoreutils-2.2.5.tar.gz bbf850a8c3c2f371f439d6525663eecdd3a737acd594d2f27f8d8f3a07830cc4

sepolgen-1.2.1.tar.gz 438c246bdc6b3cf1b12116831f4c601aaae6e93decb007dddab212a3c88781b0

Changes in this release include:

• Various fd leaks and memory leaks
• Context function optimizations
• New sepolicy tool to unify smaller utilities
• setfiles progress estimation
• Man page updates
• Add support for setrans color in shell prompt

checkpolicy-2.1.12.tar.gz e6a0ac539b74859b4262b317eb90d9914deb15e7aa509659f47724d50fe2ecc6

libselinux-2.1.13.tar.gz 57aad47c06b7ec18a76e8d9870539277a84cb40109cfdcf70ed3260bdb04447a

libsemanage-2.1.10.tar.gz de2e8077245581e94576276f54e80a53c23c28d6961d2dfbe2f004eaba452e91

libsepol-2.1.9.tar.gz 290d17f583635a4a5d8a2141511272adf0571c4205cdea38b5a68df20d58a70b

policycoreutils-2.1.14.tar.gz b6881741f9f9988346a73bfeccb0299941dc117349753f0ef3f23ee86f06c1b5

sepolgen-1.1.9.tar.gz 8a1c6d3a78c9b6ad3555c74def555f65a62950bf21c111c585bfc382fec3a645

Changes in this release include:

• Android/MacOS X build support
• Boolean name substitution
• PCRE for file_context labeling
• Fix neverallow checking on attributes
• Add always_check_network policy capability
• Translations from the Fedora community
• Various sandbox enhancements
• Various bug fixes
• Various man page updates

checkpolicy-2.1.11.tar.gz 06acbc776134464d133669de82b7f7c7ebca376c307a3a3478544a42c5d050f1

libselinux-2.1.12.tar.gz 8dad879380e0ce1e4ab67195a08f6052c1396493bcb12fe92a033f49f7dbca9e

libsemanage-2.1.9.tar.gz 6f01d17f9751412f7b76e6e7daafeb2faf301b9bfeea83506160c81becf035cc

libsepol-2.1.8.tar.gz 63eedd2e435658eedb14cf5eb803468b701f4a2404f1a4af4ab52858e9c068f0

policycoreutils-2.1.13.tar.gz 34040f06f3111d9ee957576e4095841d35b9ca9141ee8d80aab036cbefb28584

sepolgen-1.1.8.tar.gz b5f56130619672b782658c0c9e32d621a1dcaaa6f7d3cffc10f47c4e5a625aeb

Changes in this release include:

• Various enhancements to dispol/dismod
• Many man page cleanups and updates
• Support for python3 in bindings
• Many makefile cleanups
• Support for tunables separate from booleans
• Various bug fixes
• Sandbox cgroup support
• Various Sandbox enhancements
• File context equivalence
• Various semanage enhancements and bug fixes
• Add semodule_unpackage

checkpolicy-2.1.8

libselinux-2.1.9

libsemanage-2.1.6

libsepol-2.1.4

policycoreutils-2.1.10

sepolgen-1.1.5

New features in this release include:

• Add support for optional file name in type_transition rules by Eric Paris
• Add class field in role_transition rules by Harry Ciao
• Add role attribute support by Harry Ciao
• Add file_context.subs_dist for distro specific filecon substitutions by Daniel Walsh
• Give correct names to mount points in load_policy by Daniel Walsh
• Make sure selinux state is reported correctly if selinux is disabled or fails to load by Daniel Walsh
• Fix crash if selinux_key_create was never called by Daniel Walsh
• Use correct color range in mcstrand by Richard Haines
• Update man pages for selinux_color_* functions by Richard Haines
• Add db_language object class support for selabel_lookup from KaiGai Kohei
• Add selinux_status_* interfaces for /selinux/status from KaiGai Kohei
• Allow filesystem names to start with a digit by James Carter
• Allow single digit module versions by Daniel Walsh

checkpolicy-2.1.0

libselinux-2.1.0

libsemanage-2.1.0

libsepol-2.1.0

policycoreutils-2.1.0

sepolgen-1.1.0

New features in this release include:

• Support for on-the-fly sandboxing of applications, including X applications
• Support for MLS/MCS translations
• Improved robustness in multithreaded processes
• Support for building under GCC 4.6
• Simplification of login context computation logic
• newrole support for libcap-ng
• Improved robustness in label computation

checkpolicy-2.0.23

libselinux-2.0.98

libsemanage-2.0.46

libsepol-2.0.42

policycoreutils-2.0.85

sepolgen-1.0.23

New features in this release include:

• semodule enable/disable support
• audit2allow support for generating dontaudit rules
• Improved support across distributions
• Improved man pages and help output
• Improved handling of auditing in userspace object managers when dontaudit/auditallow rules are involved
• Support for running genhomedircon without examining /etc/passwd

checkpolicy-2.0.21

libselinux-2.0.94

libsemanage-2.0.45

libsepol-2.0.41

policycoreutils-2.0.82

sepolgen-1.0.23

##Release 2009-11-23

New features in this release include:

• Configurable bzip behavior in libsemanage
• semanage dontaudit support
• Proper semodule upgrade support
• setfiles support for labeling when SELinux is not enabled
• Support for multiple target OSes

checkpolicy-2.0.20

libselinux-2.0.89

libsemanage-2.0.42

libsepol-2.0.41

policycoreutils-2.0.77

sepolgen-1.0.18

##Release 2009-07-31

New features in this release include:

• Label substitution
• Virtual machine labeling
• Per-service seuser support
• Persistent dontaudit flag
• Btrfs labeling support

checkpolicy-2.0.19

libselinux-2.0.85

libsemanage-2.0.33

libsepol-2.0.37

policycoreutils-2.0.69

sepolgen-1.0.17

This is primarily a bug fix release. New features included are:

• Policy module compression (bzip2) support
• AVC caching for compute_create results

Note: the 1.0 stable branch will no longer have releases.

checkpolicy-2.0.19

libselinux-2.0.79

libsemanage-2.0.31

libsepol-2.0.36

policycoreutils-2.0.62

sepolgen-1.0.16

This is primarily a bug fix release. New features included are:

• Ruby bindings for libselinux
• Group support in seuser files
• semanage node support
• semanage boolean file support (loading booleans from a file)
• semanage permissive support

checkpolicy-2.0.16

libsemanage-2.0.27

policycoreutils-2.0.55

libselinux-2.0.71

libsepol-2.0.32

sepolgen-1.0.13

checkpolicy-1.34.7

libsemanage-1.10.9

policycoreutils-1.34.16

libselinux-1.34.15

libsepol-1.16.14