Automic VaultAutomic Vault

brew

使用 Homebrew, apk, dnf, Nix, apt, zypper 安装 libsepol

查看 libsepol 的安装路径、可执行文件、元数据以及面向 AI 代理工作流的安全说明。

安装命令安全说明

安装

其他安装命令

macOS

Homebrew已验证 · 100%
brew install libsepol

local Homebrew formula metadata

Linux

Alpine Linux apk已验证 · 92%
sudo apk add libsepol

Alpine Linux edge package indexes · libsepol · 来源: dl-cdn.alpinelinux.org

Fedora dnf已验证 · 92%
sudo dnf install libsepol

Fedora Rawhide package metadata · libsepol · 来源: dl.fedoraproject.org

Nix已验证 · 92%
nix profile install nixpkgs#libsepol

nixpkgs package indexes · pkgs/by-name/li/libsepol/package.nix · 来源: api.github.com

Debian apt已验证 · 92%
sudo apt install libsepol-dev

Debian stable package indexes · libsepol-dev · 来源: deb.debian.org

openSUSE zypper已验证 · 92%
sudo zypper install libsepol-devel

openSUSE Tumbleweed package metadata · libsepol-devel · 来源: download.opensuse.org

概览

软件包摘要

SELinux binary policy manipulation library

命令和别名

  • chkcon
  • sepol_check_access
  • sepol_compute_av
  • sepol_compute_member
  • sepol_compute_relabel
  • sepol_validate_transition

历史

项目历史与用法

libsepol is the SELinux binary policy manipulation library. It sits below higher-level management tools and policy compilers, handling the compiled policy representation that the kernel consumes.

项目历史

libsepol grew as part of the SELinux userspace stack, which was separated from the kernel-side mandatory access-control mechanism into libraries, compilers, and administrative tools. The SELinuxProject repository contains libsepol alongside libselinux, libsemanage, policycoreutils, checkpolicy, and secilc.

The upstream userspace package documentation describes secilc and checkpolicy as using libsepol to generate binary policy. It also describes libsemanage as relying on libsepol for binary policy manipulation and on libselinux for interaction with the running SELinux system.

采用历史

libsepol's adoption followed SELinux adoption in distributions: it is packaged as a base SELinux userspace component rather than as a user-facing application. Systems that build, load, downgrade, inspect, or manage SELinux policy tend to pull in libsepol directly or indirectly.

The library is also useful outside a fully SELinux-enabled Linux system, because policy analysis and compilation workflows can run on systems that are not enforcing SELinux.

使用方式

Administrators usually touch libsepol indirectly through semodule, semanage, checkpolicy, secilc, load_policy, and related SELinux tools. The Homebrew formula exposes helper commands such as chkcon and sepol_check_access for policy-oriented checks.

For developers, libsepol is the lower-level library to use when the task is reading, writing, checking, or transforming SELinux binary policy rather than asking the running system for a process or file context.

为什么软件包爱好者会关心

libsepol is the package that reminds distro maintainers that SELinux is not one package: the enforcement model depends on a layered toolchain. libselinux is the runtime-facing layer, libsepol is the binary-policy layer, and libsemanage plus policycoreutils build the administrative experience above them.

Because Homebrew can build libsepol on macOS mainly for policy analysis, it is a neat example of a Linux security component whose most portable part is the file-format and compiler tooling.

时间线

  • 2001: NSA published SELinux technical reports on the original Linux kernel patch and Linux Security Module integration.
  • 2008-09-09: The SELinux userspace release archive lists coordinated source tarball releases including libsepol.
  • 2015-02-02: The userspace release archive includes libsepol 2.4 alongside libselinux 2.4 and related packages.
  • 2026-02-02: SELinuxProject repository metadata records SELinux userspace release 3.10.

Related projects

  • checkpolicy and secilc use libsepol to produce binary policy, libsemanage uses it when managing policy modules, libselinux may use it when loading policy, and policycoreutils provides many of the command-line tools around those libraries.

安全态势

风险级别：绿色

library-like package without higher-risk signals.

风险分类器

绿色 风险 · 低 置信度 · appliance

原因

  • library-like package without higher-risk signals

信号

  • metadata:library-like

安装行为

  • formula 元数据中未记录 Homebrew post-install 钩子。
  • Homebrew bottle 元数据适用于 6 个平台目标。
  • 构建元数据列出 1 个构建依赖。

建议审查

在无人值守的代理使用前，请检查该工具是否读取明文凭据、写入远程状态、发布制品或调用插件。

可执行文件

已安装的可执行文件

命令类型暴露范围备注
chkconcli全局可执行文件
sepol_check_accesscli全局可执行文件
sepol_compute_avcli全局可执行文件
sepol_compute_membercli全局可执行文件
sepol_compute_relabelcli全局可执行文件
sepol_validate_transitioncli全局可执行文件

新鲜度

版本和新鲜度

这些信号区分页生成时间、软件包管理器活动和上游发布比较。只有存在证据 URL 和可比较版本时，才会提示版本落后。

页面生成时间2026-07-25
管理器版本3.11
管理器更新时间2026-07-01
本地数据OK
上游not checked
检测到的最新版本未检测到

https://github.com/SELinuxProject/selinux

安装元数据

软件包元数据

软件包键brew:libsepol
版本3.11
软件包管理器Homebrew
软件包管理器页面https://formulae.brew.sh/formula/libsepol
主页https://github.com/SELinuxProject/selinux
仓库https://github.com/SELinuxProject/selinux
上游文档https://github.com/SELinuxProject/selinux/wiki
许可证LGPL-2.1-or-later
源码归档https://github.com/SELinuxProject/selinux/releases/download/3.11/libsepol-3.11.tar.gz
最后更新2026-07-01T18:53:14Z
Pulseupdated
构建依赖coreutils
Bottle可用 (于 arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux)
Homebrew post-install未定义
服务未声明

注册表事实

源数据库详情

Source DatabaseHomebrew formula API
Taphomebrew/core
Full Namelibsepol
Version Scheme0
Revision0
Bottle Stable Root URLhttps://ghcr.io/v2/homebrew/core
Deprecatedno
Disabledno
Keg Onlyno
URL Keys
  • stable

源数据库匹配

其他软件包管理器记录

匹配项来自外部软件包管理器索引，并与本地 Automic Vault 软件包链接分开显示。

Debian apt95%

libsepol-dev 3.8.1-1

SELinux binary policy manipulation library and development files

https://selinuxproject.org

sudo apt install libsepol-dev
  • Section: libdevel
  • Architecture: amd64
  • Source Package: libsepol
  • 1 依赖
  • normalized package name match
  • 匹配方式：Libsepol
Debian stable package indexes · deb.debian.org · Debian stable package indexes: libsepol-dev from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz
Debian apt95%

libsepol2 3.8.1-1

SELinux library for manipulating binary security policies

https://selinuxproject.org

sudo apt install libsepol2
  • Section: libs
  • Architecture: amd64
  • Source Package: libsepol
  • 1 依赖
  • normalized package name match
  • 匹配方式：Libsepol
Debian stable package indexes · deb.debian.org · Debian stable package indexes: libsepol2 from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz
Debian apt95%

sepol-utils 3.8.1-1

Security Enhanced Linux policy utility programs

https://selinuxproject.org

sudo apt install sepol-utils
  • Section: admin
  • Architecture: amd64
  • Source Package: libsepol
  • 2 依赖
  • normalized package name match
  • 匹配方式：Libsepol
Debian stable package indexes · deb.debian.org · Debian stable package indexes: sepol-utils from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz
Nix95%

libsepol

nix profile install nixpkgs#libsepol
  • normalized package name match
  • 匹配方式：Libsepol
nixpkgs package indexes · api.github.com · nixpkgs package indexes: pkgs/by-name/li/libsepol/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1
Ubuntu apt95%

libsepol-dev 3.5-2build1

SELinux binary policy manipulation library and development files

https://selinuxproject.org

sudo apt install libsepol-dev
  • Section: libdevel
  • Architecture: amd64
  • Source Package: libsepol
  • 1 依赖
  • normalized package name match
  • 匹配方式：Libsepol
Ubuntu 24.04 LTS package indexes · archive.ubuntu.com · Ubuntu 24.04 LTS package indexes: libsepol-dev from https://archive.ubuntu.com/ubuntu/dists/noble/main/binary-amd64/Packages.gz
Ubuntu apt95%

libsepol2 3.5-2build1

SELinux library for manipulating binary security policies

https://selinuxproject.org

sudo apt install libsepol2
  • Section: libs
  • Architecture: amd64
  • Source Package: libsepol
  • 1 依赖
  • normalized package name match
  • 匹配方式：Libsepol
Ubuntu 24.04 LTS package indexes · archive.ubuntu.com · Ubuntu 24.04 LTS package indexes: libsepol2 from https://archive.ubuntu.com/ubuntu/dists/noble/main/binary-amd64/Packages.gz
Ubuntu apt95%

sepol-utils 3.5-2build1

Security Enhanced Linux policy utility programs

https://selinuxproject.org

sudo apt install sepol-utils
  • Section: universe/misc
  • Architecture: amd64
  • Source Package: libsepol
  • 2 依赖
  • normalized package name match
  • 匹配方式：Libsepol
Ubuntu 24.04 LTS package indexes · archive.ubuntu.com · Ubuntu 24.04 LTS package indexes: sepol-utils from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz
apk95%

libsepol 3.10-r0

SELinux binary policy manipulation library

https://github.com/SELinuxProject/selinux/wiki

sudo apk add libsepol
  • License: LGPL-2.0-or-later
  • Architecture: x86_64
  • Source Package: libsepol
  • 1 依赖
  • 1 提供
  • normalized package name match
  • 匹配方式：Libsepol
Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: libsepol from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz
apk95%

libsepol-dev 3.10-r0

SELinux binary policy manipulation library (development files)

https://github.com/SELinuxProject/selinux/wiki

sudo apk add libsepol-dev
  • License: LGPL-2.0-or-later
  • Architecture: x86_64
  • Source Package: libsepol
  • 1 依赖
  • 1 提供
  • normalized package name match
  • 匹配方式：Libsepol
Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: libsepol-dev from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz
apk95%

libsepol-doc 3.10-r0

SELinux binary policy manipulation library (documentation)

https://github.com/SELinuxProject/selinux/wiki

sudo apk add libsepol-doc
  • License: LGPL-2.0-or-later
  • Architecture: x86_64
  • Source Package: libsepol
  • normalized package name match
  • 匹配方式：Libsepol
Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: libsepol-doc from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz
dnf95%

libsepol 3.10-1.fc44

SELinux binary policy manipulation library

https://github.com/SELinuxProject/selinux/wiki

sudo dnf install libsepol
  • License: LGPL-2.1-or-later
  • Category: Unspecified
  • Architecture: i686
  • Source Package: libsepol
  • 2 依赖
  • 2 提供
  • normalized package name match
  • 匹配方式：Libsepol
Fedora Rawhide package metadata · dl.fedoraproject.org · Fedora Rawhide package metadata: libsepol from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/e5ca8ce900cd68f5419e1c39ae517343100b306336cbaeb70a3c153121d95094-primary.xml.zst
dnf95%

libsepol-devel 3.10-1.fc44

Header files and libraries used to build policy manipulation tools

https://github.com/SELinuxProject/selinux/wiki

sudo dnf install libsepol-devel
  • License: LGPL-2.1-or-later
  • Category: Unspecified
  • Architecture: i686
  • Source Package: libsepol
  • 3 依赖
  • 2 提供
  • normalized package name match
  • 匹配方式：Libsepol
Fedora Rawhide package metadata · dl.fedoraproject.org · Fedora Rawhide package metadata: libsepol-devel from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/e5ca8ce900cd68f5419e1c39ae517343100b306336cbaeb70a3c153121d95094-primary.xml.zst
dnf95%

libsepol-static 3.10-1.fc44

static libraries used to build policy manipulation tools

https://github.com/SELinuxProject/selinux/wiki

sudo dnf install libsepol-static
  • License: LGPL-2.1-or-later
  • Category: Unspecified
  • Architecture: i686
  • Source Package: libsepol
  • 1 依赖
  • 1 提供
  • normalized package name match
  • 匹配方式：Libsepol
Fedora Rawhide package metadata · dl.fedoraproject.org · Fedora Rawhide package metadata: libsepol-static from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/e5ca8ce900cd68f5419e1c39ae517343100b306336cbaeb70a3c153121d95094-primary.xml.zst
dnf95%

libsepol-utils 3.10-1.fc44

SELinux libsepol utilities

https://github.com/SELinuxProject/selinux/wiki

sudo dnf install libsepol-utils
  • License: LGPL-2.1-or-later
  • Category: Unspecified
  • Architecture: x86_64
  • Source Package: libsepol
  • 4 依赖
  • 1 提供
  • normalized package name match
  • 匹配方式：Libsepol
Fedora Rawhide package metadata · dl.fedoraproject.org · Fedora Rawhide package metadata: libsepol-utils from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/e5ca8ce900cd68f5419e1c39ae517343100b306336cbaeb70a3c153121d95094-primary.xml.zst
zypper95%

libsepol-devel 3.10-1.3

Development files for SELinux's binary policy manipulation library

https://github.com/SELinuxProject/selinux/wiki/Releases

sudo zypper install libsepol-devel
  • License: LGPL-2.1-or-later
  • Category: Development/Libraries/C and C++
  • Architecture: x86_64
  • Source Package: libsepol
  • 3 依赖
  • 2 提供
  • normalized package name match
  • 匹配方式：Libsepol
openSUSE Tumbleweed package metadata · download.opensuse.org · openSUSE Tumbleweed package metadata: libsepol-devel from https://download.opensuse.org/tumbleweed/repo/oss/repodata/be8d3611d25469107f32075a1697e69ec57a2b850b42348a658cc671ad5ec2b50760d02c3e59524d50da9a11d5be799bdaffba2e166e8ca8858512e3c0bd665d-primary.xml.zst
zypper95%

libsepol-devel-static 3.10-1.3

Static archives for SELinux's binary policy manipulation library

https://github.com/SELinuxProject/selinux/wiki/Releases

sudo zypper install libsepol-devel-static
  • License: LGPL-2.1-or-later
  • Category: Development/Libraries/C and C++
  • Architecture: x86_64
  • Source Package: libsepol
  • 1 依赖
  • 1 提供
  • normalized package name match
  • 匹配方式：Libsepol
openSUSE Tumbleweed package metadata · download.opensuse.org · openSUSE Tumbleweed package metadata: libsepol-devel-static from https://download.opensuse.org/tumbleweed/repo/oss/repodata/be8d3611d25469107f32075a1697e69ec57a2b850b42348a658cc671ad5ec2b50760d02c3e59524d50da9a11d5be799bdaffba2e166e8ca8858512e3c0bd665d-primary.xml.zst

软件包图谱

链接来自本地软件包关系图、补充数据、依赖边、生态匹配和软件包 hub 归属。

相关工具

  • coreutilsBuild dependency declared by Homebrew.
  • libselinuxPopular package that depends on this formula.

相同工作流

  • acme.shShares av.db curated category or tags: cli, security.
  • aescryptShares av.db curated category or tags: cli, security.
  • aespipeShares av.db curated category or tags: cli, security.
  • afflibShares av.db curated category or tags: cli, security.
  • afl++Shares av.db curated category or tags: cli, security.
  • ageShares av.db curated category or tags: cli, security.

来源线索

由仓库数据生成

此页面由 av-web 从 scripts/generate-pkg-sqlite.py 生成的私有软件包 SQLite 工件提供。

使用的来源

  • Geiger risk classifier
  • Nucleus package database
  • av.db category and tag curation
  • cross-ecosystem install command graph
  • curated package history
  • external package-manager database matches
  • package relationship graph
  • package version freshness
  • package-page enrichment