selinux-rules

What problem does it solve?

SELinux architectural axioms, constraints, and patterns for UMRS: security context format, targeted vs MLS policy, trust gates, naming conventions, and anti-patterns. Use this skill when working with umrs-selinux, security contexts, SELinux policy, MLS/MCS levels, selinux.te, fcontext rules, or MAC enforcement. Trigger when the user or agent mentions SELinux, security context, MLS, MCS, targeted policy, enforcing mode, semanage, restorecon, chcon, xattr, security.selinux, umrs.te, umrs.fc, or any SELinux policy work. Also trigger when writing deployment docs that reference SELinux types, users, roles, or categories.

Core Features & Use Cases

• Provides a structured framework of SELinux axioms, constraints, rules, and patterns that guide UMRS security-context decisions.
• Helps design and audit SELinux policy artifacts (te files, fcontext, MLS vs targeted deployments), and provide consistent naming conventions and anti-pattern awareness.
• Use Case: When deploying UMRS, reference SELinux policy decisions, verify contexts, and ensure alignment with MLS or targeted policy constraints.

Quick Start

Provide an initial, high-level SELinux policy outline for a UMRS deployment and validation pass.