Complete documentation will soon be available at: https://wiki.archlinux.org/index.php/SELinux

Authors are credited in the PKGBUILD file for each package.

No binary repository available at the moment.

Remember to build as a non-root user, and to keep a root logged-in console to install packages (especially for sudo/shadow/pam packages).

• linux-selinux (support in Arch Official kernel on the way: https://bugs.archlinux.org/task/37578) can be built at any time. linux-hardened package provides SELinux.

First, we build all packages from the SELinux userspace projet. They do not replace any official Arch Linux packages:

• libsepol
• libselinux
• secilc
• checkpolicy
• setools
• libsemanage
• semodule-utils
• policycoreutils
• selinux-dbus-config
• selinux-gui
• selinux-python
• selinux-sandbox
• mcstrans
• restorecond

This makes it possible to install a pacman hook which relabels files when installing and updating packages:

• selinux-alpm-hook

Now we start replacing core packages:

• pambase-selinux
• pam-selinux
• coreutils-selinux shadow-selinux cronie-selinux sudo-selinux
• util-linux-selinux
• systemd-selinux
• logrotate-selinux
• dbus-selinux

Optional but very nice to have:

• openssh-selinux findutils-selinux iproute2-selinux psmisc-selinux

There is not yet a SELinux policy for Arch. To build a policy, here are some useful links:

• https://github.com/TresysTechnology/refpolicy The Reference Policy
• https://github.com/pebenito/refpolicy ongoing work to include a systemd policy in the refpolicy (announcement: http://oss.tresys.com/pipermail/refpolicy/2014-October/007430.html)
• http://anonscm.debian.org/cgit/selinux/refpolicy.git/tree/debian/patches Debian patches for refpolicy package (including systemd patches)
• https://github.com/selinux-policy/selinux-policy/tree/rawhide-base Fedora policy