Analyze SELinux policies and security contexts for UMRS deployments.
npx skills add https://github.com/jamieadams-nerd/umrs-project --skill selinux-rules
Please help me install this Agent Skill. Skill: selinux-rules Source: https://github.com/jamieadams-nerd/umrs-project/tree/main/.claude/skills/selinux-rules Command: npx skills add https://github.com/jamieadams-nerd/umrs-project --skill selinux-rules
SELinux architectural axioms, constraints, and patterns for UMRS: security context format, targeted vs MLS policy, trust gates, naming conventions, and anti-patterns. Use this skill when working with umrs-selinux, security contexts, SELinux policy, MLS/MCS levels, selinux.te, fcontext rules, or MAC enforcement. Trigger when the user or agent mentions SELinux, security context, MLS, MCS, targeted policy, enforcing mode, semanage, restorecon, chcon, xattr, security.selinux, umrs.te, umrs.fc, or any SELinux policy work. Also trigger when writing deployment docs that reference SELinux types, users, roles, or categories.
Provide an initial, high-level SELinux policy outline for a UMRS deployment and validation pass.
High-intent search queries and answers about installing and using this skill.
Writing SELinux policy rules involves defining security contexts, trust gates, and type enforcement statements. This skill codifies axioms, constraints, and patterns to guide UMRS policy decisions across targeted and MLS deployments using kernel-state reads.
MLS and MCS differ in how they enforce multi-level and multi-category security constraints. This skill outlines axioms and patterns for selecting targeted versus MLS policy considerations and applying correct security.context formatting in UMRS environments.
Use semanage to define fcontext rules and restorecon to apply them to files. This skill codifies constraints and anti-patterns for managing SELinux policy artifacts like umrs.te and umrs.fc files during UMRS deployments.
SELinux trust gates are needed when deploying UMRS in enforcing mode to validate security contexts and MAC constraints. This skill provides structured rules and patterns to verify contexts and ensure alignment with targeted or MLS policy requirements.
SELinux security contexts may not persist if fcontext rules are not defined before running restorecon. This skill codifies anti-patterns and constraints for UMRS deployments, relying on kernel-state reads rather than admin config to validate context assignments.
jamieadams-nerdPerform semantic search over the UMRS reference library with JSON output.
chfleDiagnose and fix SELinux denials with file contexts, booleans, and policy modules.
rloisellProvide RHEL administration and troubleshooting for systemd, LVM, SELinux, firewalld, networking, packages, performance, and crashes.
L3DigitalNetAdminister Samba file servers with configuration, user, and share management.
