libsepol1 - SELinux library for manipulating binary security policies

Distribution: Debian 8 (Jessie)
Repository: Debian Main amd64
Package name: libsepol1
Package version: 2.3
Package release: 2
Package architecture: amd64
Package type: deb
Installed size: 339 B
Download size: 123.91 KB
Official Mirror:
Security-enhanced Linux is a patch of the Linux kernel and a number of utilities with enhanced security functionality designed to add mandatory access controls to Linux. The Security-enhanced Linux kernel contains new architectural components originally developed to improve the security of the Flask operating system. These architectural components provide general support for the enforcement of many kinds of mandatory access control policies, including those based on the concepts of Type Enforcement®, Role-based Access Control, and Multi-level Security. libsepol provides an API for the manipulation of SELinux binary policies. It is used by checkpolicy (the policy compiler) and similar tools, as well as by programs like load_policy that need to perform specific transformations on binary policies such as customizing policy boolean settings.



    Binary package: libsepol1_2.3-2_amd64.deb
    Source package: libsepol

    Install Howto

    1. Update the package index:
      # sudo apt-get update
    2. Install libsepol1 deb package:
      # sudo apt-get install libsepol1


    • /lib/x86_64-linux-gnu/
    • /usr/share/doc/libsepol1/changelog.Debian.gz
    • /usr/share/doc/libsepol1/changelog.gz
    • /usr/share/doc/libsepol1/copyright


    2014-08-31 - Laurent Bigonville <> libsepol (2.3-2) unstable; urgency=medium * Drop debian/libsepol1.postinst: Reloading systemd during an upgrade in an uncontroled way might endup with unwanted side effects (Closes: #753727)

    2014-05-13 - Laurent Bigonville <> libsepol (2.3-1) unstable; urgency=medium * Team upload. * New upstream release * debian/control: Mark -dev package as Multi-arch: same. (Closes: #738049) * debian/control: Bump Standards-Version to 3.9.5 (no further changes)

    2013-11-01 - Laurent Bigonville <> libsepol (2.2-1) unstable; urgency=low * Team upload. * New upstream release - Drop debian/patches/fix-pc-file.patch: Merged upstream * debian/control: Bump Standards-Version to 3.9.4 (no further changes) * debian/control: Use canonical URL for VCS-Git field

    2013-05-20 - Laurent Bigonville <> libsepol (2.1.9-2) unstable; urgency=low * Team upload. * debian/rules: Really fix cross-compilation (Closes: #688878)

    2013-05-09 - Laurent Bigonville <> libsepol (2.1.9-1) unstable; urgency=low * Team upload. * New Upstream release * debian/rules: Automatically chose host gcc used when cross-compiling (Closes: #688878)

    2012-09-25 - Laurent Bigonville <> libsepol (2.1.8-1) experimental; urgency=low * Team upload. * New Upstream release * debian/gbp.conf: Change default git-buildpackage build-directory and the debian-branch to "debian" instead of "upstream" * debian/watch: Fix watch file URL

    2012-04-01 - Laurent Bigonville <> libsepol (2.1.4-3) unstable; urgency=low * Team upload. * debian/rules: Append CPPFLAGS hardening flags to CFLAGS (Closes: #665316) * debian/control: Re-add Conflicts/Provides for the libsepol1-dev package

    2012-03-20 - Laurent Bigonville <> libsepol (2.1.4-2) unstable; urgency=low * Team upload. * Switch to dh sequence and debhelper 9 - Enable hardened build flags (Closes: #656016) * Switch to dpkg-source 3.0 (quilt) format * debian/control: - Bump Standards-Version to 3.9.3 (no further changes) - Fix typo in Description (Closes: #639704) - Drop Conflict against checkpolicy (<= 1.20), it's long time gone - Drop Conflict/Provide against libsepol-dev, it's long time gone too - Drop Multi-Arch: same for -dev package - Drop Multi-Arch: foreign for sepol-utils package - Update Vcs-* fields - Add Homepage field - Make all binary packages arch:linux-any - Put under the Debian SELinux team maintenance * debian/patches/fix-pc-file.patch: Properly set multi-arch path in .pc file (Closes: #658440) * Add debian/gbp.conf file * debian/libsepol1.postinst: Unconditionally call telinit and ignore any errors (Closes: #652669, #663270)

    2012-02-20 - Russell Coker <> libsepol (2.1.4-1) unstable; urgency=low * New upstream version, changes to handling of tunables and moved some code from mcstrans to libsepol. * Added new symbols expand_module_avrules, sepol_get_preserve_tunables, and sepol_set_preserve_tunables.

    2011-12-16 - Riku Voipio <> libsepol (2.1.0-1.2) unstable; urgency=low * Non-maintainer upload since maintainer is busy * Build for multiarch, setting Pre-Depends multiarch-support in our shared lib package, closes: #638018 * Always use -n with gzip, to avoid encoding timestamps in the gzip file; this ensures compressed docs and other files are identical across multiple builds, required for multiarch.