New tumbleweed install - does selinux need configuring

Hi, I have a brand new TW install. I read that Selinux is installed instead of Apparmor.

Do I need to do any configuring?
Are default selinux profiles loaded or do I have to install any extras?

Thanks for your help,
Alex

You may need to tune policy to allow non-default behavior (games come as the most prominent case).

Small number of applications provide additional SELinux policy modules as separate packages. AFAICT these policy packages are required by the main application packages and so should always be installed together with the applications themselves.

OK thanks for that.

Do you know how I would know when to install an selinux policy alongside an app - for example, vlc:


zypper in vlc vlc-selinux-policy (or whatever the name for this would be)

I am not aware of any special policy for VLC.

I just used vlc as an example. It’s how do I know if I need to install a policy as well for any app I install?

I already told you that packages I am aware of are installed automatically.

1 Like

Here is some documentation on SELinux and Tumbleweed. Link