How To Install policycoreutils on Fedora 34

policycoreutils is SELinux policy core utilities

Introduction

In this tutorial we learn how to install policycoreutils on Fedora 34.

What is policycoreutils

Security-enhanced Linux is a feature of the Linux® kernel and a number of utilities with enhanced security functionality designed to add mandatory access controls to Linux. The Security-enhanced Linux kernel contains new architectural components originally developed to improve the security of the Flask operating system. These architectural components provide general support for the enforcement of many kinds of mandatory access control policies, including those based on the concepts of Type Enforcement®, Role-based Access Control, and Multi-level Security. policycoreutils contains the policy core utilities that are required for basic operation of a SELinux system. These utilities include load_policy to load policies, setfiles to label filesystems, newrole to switch roles.

We can use yum or dnf to install policycoreutils on Fedora 34. In this tutorial we discuss both methods but you only need to choose one of method to install policycoreutils.

Install policycoreutils on Fedora 34 Using dnf

Update yum database with dnf using the following command.

sudo dnf makecache --refresh

The output should look something like this:

Fedora 34 - x86_64                               20 kB/s | 6.6 kB     00:00
Fedora 34 openh264 (From Cisco) - x86_64        1.4 kB/s | 989  B     00:00
Fedora Modular 34 - x86_64                       68 kB/s | 6.5 kB     00:00
Fedora 34 - x86_64 - Updates                    3.5 kB/s | 6.2 kB     00:01
Fedora Modular 34 - x86_64 - Updates             17 kB/s | 5.9 kB     00:00
Metadata cache created.

After updating yum database, We can install policycoreutils using dnf by running the following command:

sudo dnf -y install policycoreutils

Install policycoreutils on Fedora 34 Using yum

Update yum database with yum using the following command.

sudo yum makecache --refresh

The output should look something like this:

Fedora 34 - x86_64                               20 kB/s | 6.6 kB     00:00
Fedora 34 openh264 (From Cisco) - x86_64        1.4 kB/s | 989  B     00:00
Fedora Modular 34 - x86_64                       68 kB/s | 6.5 kB     00:00
Fedora 34 - x86_64 - Updates                    3.5 kB/s | 6.2 kB     00:01
Fedora Modular 34 - x86_64 - Updates             17 kB/s | 5.9 kB     00:00
Metadata cache created.

After updating yum database, We can install policycoreutils using yum by running the following command:

sudo yum -y install policycoreutils

How To Uninstall policycoreutils on Fedora 34

To uninstall only the policycoreutils package we can use the following command:

sudo dnf remove policycoreutils

policycoreutils Package Contents on Fedora 34

/etc/sestatus.conf
/usr/bin/secon
/usr/bin/semodule_expand
/usr/bin/semodule_link
/usr/bin/semodule_package
/usr/bin/semodule_unpackage
/usr/bin/sestatus
/usr/lib/.build-id
/usr/lib/.build-id/21
/usr/lib/.build-id/21/2db1ab8ed6429928699f7389d0837051c469d0
/usr/lib/.build-id/26
/usr/lib/.build-id/26/8240339eefaea44aca679b216582eb8008075d
/usr/lib/.build-id/2b
/usr/lib/.build-id/2b/f78aa2fc6a5fee48b272a7a6817606d7435c60
/usr/lib/.build-id/33
/usr/lib/.build-id/33/55f893ab10d962fb7a57f6aad010614baf2db5
/usr/lib/.build-id/4e
/usr/lib/.build-id/4e/f033f133ac0cd637a5138da0879aa6dd701609
/usr/lib/.build-id/a6
/usr/lib/.build-id/a6/b0be454b8d391fe6cc2ed81f8db8448d070c77
/usr/lib/.build-id/b4
/usr/lib/.build-id/b4/c16c1794ab8e87bd954550b574410dac25ca58
/usr/lib/.build-id/bc
/usr/lib/.build-id/bc/9039d947d447d39388c3f557420bb0cc68a811
/usr/lib/.build-id/bd
/usr/lib/.build-id/bd/d7a16114ca14cd6e69acce9482ec6a57ad5a3e
/usr/lib/.build-id/cf
/usr/lib/.build-id/cf/93fb1d5ddb6c7c4e3f3b00a38f23c1df020c25
/usr/lib/.build-id/d2
/usr/lib/.build-id/d2/6f55064b85124155aec5d01ee1e247932adc28
/usr/lib/.build-id/ea
/usr/lib/.build-id/ea/07c8ce543ac441dd4fa25e7e82313849cbea61
/usr/lib/systemd/system-generators/selinux-autorelabel-generator.sh
/usr/lib/systemd/system/selinux-autorelabel-mark.service
/usr/lib/systemd/system/selinux-autorelabel.service
/usr/lib/systemd/system/selinux-autorelabel.target
/usr/libexec/selinux/hll
/usr/libexec/selinux/hll/pp
/usr/libexec/selinux/selinux-autorelabel
/usr/sbin/fixfiles
/usr/sbin/genhomedircon
/usr/sbin/load_policy
/usr/sbin/restorecon
/usr/sbin/restorecon_xattr
/usr/sbin/semodule
/usr/sbin/sestatus
/usr/sbin/setfiles
/usr/sbin/setsebool
/usr/share/bash-completion
/usr/share/bash-completion/completions/setsebool
/usr/share/doc/policycoreutils
/usr/share/licenses/policycoreutils
/usr/share/licenses/policycoreutils/COPYING
/usr/share/locale/af/LC_MESSAGES/policycoreutils.mo
/usr/share/locale/aln/LC_MESSAGES/policycoreutils.mo
/usr/share/locale/am/LC_MESSAGES/policycoreutils.mo
/usr/share/locale/ar/LC_MESSAGES/policycoreutils.mo
/usr/share/locale/as/LC_MESSAGES/policycoreutils.mo
/usr/share/locale/ast/LC_MESSAGES/policycoreutils.mo
/usr/share/locale/az/LC_MESSAGES/policycoreutils.mo
/usr/share/locale/bal/LC_MESSAGES/policycoreutils.mo
/usr/share/locale/be/LC_MESSAGES/policycoreutils.mo
/usr/share/locale/bg/LC_MESSAGES/policycoreutils.mo
/usr/share/locale/bn/LC_MESSAGES/policycoreutils.mo
/usr/share/locale/bn_BD/LC_MESSAGES/policycoreutils.mo
/usr/share/locale/bn_IN/LC_MESSAGES/policycoreutils.mo
/usr/share/locale/bo/LC_MESSAGES/policycoreutils.mo
/usr/share/locale/br/LC_MESSAGES/policycoreutils.mo
/usr/share/locale/brx/LC_MESSAGES/policycoreutils.mo
/usr/share/locale/bs/LC_MESSAGES/policycoreutils.mo
/usr/share/locale/ca/LC_MESSAGES/policycoreutils.mo
/usr/share/locale/cs/LC_MESSAGES/policycoreutils.mo
/usr/share/locale/cy/LC_MESSAGES/policycoreutils.mo
/usr/share/locale/da/LC_MESSAGES/policycoreutils.mo
/usr/share/locale/de/LC_MESSAGES/policycoreutils.mo
/usr/share/locale/de_CH/LC_MESSAGES/policycoreutils.mo
/usr/share/locale/dz/LC_MESSAGES/policycoreutils.mo
/usr/share/locale/el/LC_MESSAGES/policycoreutils.mo
/usr/share/locale/en_GB/LC_MESSAGES/policycoreutils.mo
/usr/share/locale/eo/LC_MESSAGES/policycoreutils.mo
/usr/share/locale/es/LC_MESSAGES/policycoreutils.mo
/usr/share/locale/es_MX/LC_MESSAGES/policycoreutils.mo
/usr/share/locale/et/LC_MESSAGES/policycoreutils.mo
/usr/share/locale/eu/LC_MESSAGES/policycoreutils.mo
/usr/share/locale/fa/LC_MESSAGES/policycoreutils.mo
/usr/share/locale/fi/LC_MESSAGES/policycoreutils.mo
/usr/share/locale/fr/LC_MESSAGES/policycoreutils.mo
/usr/share/locale/ga/LC_MESSAGES/policycoreutils.mo
/usr/share/locale/gl/LC_MESSAGES/policycoreutils.mo
/usr/share/locale/gu/LC_MESSAGES/policycoreutils.mo
/usr/share/locale/he/LC_MESSAGES/policycoreutils.mo
/usr/share/locale/hi/LC_MESSAGES/policycoreutils.mo
/usr/share/locale/hr/LC_MESSAGES/policycoreutils.mo
/usr/share/locale/hu/LC_MESSAGES/policycoreutils.mo
/usr/share/locale/hy/LC_MESSAGES/policycoreutils.mo
/usr/share/locale/ia/LC_MESSAGES/policycoreutils.mo
/usr/share/locale/id/LC_MESSAGES/policycoreutils.mo
/usr/share/locale/ilo/LC_MESSAGES/policycoreutils.mo
/usr/share/locale/is/LC_MESSAGES/policycoreutils.mo
/usr/share/locale/it/LC_MESSAGES/policycoreutils.mo
/usr/share/locale/ja/LC_MESSAGES/policycoreutils.mo
/usr/share/locale/ka/LC_MESSAGES/policycoreutils.mo
/usr/share/locale/kk/LC_MESSAGES/policycoreutils.mo
/usr/share/locale/km/LC_MESSAGES/policycoreutils.mo
/usr/share/locale/kn/LC_MESSAGES/policycoreutils.mo
/usr/share/locale/ko/LC_MESSAGES/policycoreutils.mo
/usr/share/locale/ks/LC_MESSAGES/policycoreutils.mo
/usr/share/locale/ku/LC_MESSAGES/policycoreutils.mo
/usr/share/locale/ky/LC_MESSAGES/policycoreutils.mo
/usr/share/locale/la/LC_MESSAGES/policycoreutils.mo
/usr/share/locale/lo/LC_MESSAGES/policycoreutils.mo
/usr/share/locale/lt/LC_MESSAGES/policycoreutils.mo
/usr/share/locale/lt_LT/LC_MESSAGES/policycoreutils.mo
/usr/share/locale/lv/LC_MESSAGES/policycoreutils.mo
/usr/share/locale/lv_LV/LC_MESSAGES/policycoreutils.mo
/usr/share/locale/mai/LC_MESSAGES/policycoreutils.mo
/usr/share/locale/mg/LC_MESSAGES/policycoreutils.mo
/usr/share/locale/mk/LC_MESSAGES/policycoreutils.mo
/usr/share/locale/ml/LC_MESSAGES/policycoreutils.mo
/usr/share/locale/mn/LC_MESSAGES/policycoreutils.mo
/usr/share/locale/mr/LC_MESSAGES/policycoreutils.mo
/usr/share/locale/ms/LC_MESSAGES/policycoreutils.mo
/usr/share/locale/my/LC_MESSAGES/policycoreutils.mo
/usr/share/locale/nb/LC_MESSAGES/policycoreutils.mo
/usr/share/locale/nds/LC_MESSAGES/policycoreutils.mo
/usr/share/locale/ne/LC_MESSAGES/policycoreutils.mo
/usr/share/locale/nl/LC_MESSAGES/policycoreutils.mo
/usr/share/locale/nn/LC_MESSAGES/policycoreutils.mo
/usr/share/locale/nso/LC_MESSAGES/policycoreutils.mo
/usr/share/locale/or/LC_MESSAGES/policycoreutils.mo
/usr/share/locale/pa/LC_MESSAGES/policycoreutils.mo
/usr/share/locale/pl/LC_MESSAGES/policycoreutils.mo
/usr/share/locale/pt/LC_MESSAGES/policycoreutils.mo
/usr/share/locale/pt_BR/LC_MESSAGES/policycoreutils.mo
/usr/share/locale/ro/LC_MESSAGES/policycoreutils.mo
/usr/share/locale/ru/LC_MESSAGES/policycoreutils.mo
/usr/share/locale/si/LC_MESSAGES/policycoreutils.mo
/usr/share/locale/si_LK/LC_MESSAGES/policycoreutils.mo
/usr/share/locale/sk/LC_MESSAGES/policycoreutils.mo
/usr/share/locale/sl/LC_MESSAGES/policycoreutils.mo
/usr/share/locale/sq/LC_MESSAGES/policycoreutils.mo
/usr/share/locale/sr/LC_MESSAGES/policycoreutils.mo
/usr/share/locale/sr@latin/LC_MESSAGES/policycoreutils.mo
/usr/share/locale/sv/LC_MESSAGES/policycoreutils.mo
/usr/share/locale/ta/LC_MESSAGES/policycoreutils.mo
/usr/share/locale/te/LC_MESSAGES/policycoreutils.mo
/usr/share/locale/tg/LC_MESSAGES/policycoreutils.mo
/usr/share/locale/th/LC_MESSAGES/policycoreutils.mo
/usr/share/locale/tl/LC_MESSAGES/policycoreutils.mo
/usr/share/locale/tr/LC_MESSAGES/policycoreutils.mo
/usr/share/locale/uk/LC_MESSAGES/policycoreutils.mo
/usr/share/locale/ur/LC_MESSAGES/policycoreutils.mo
/usr/share/locale/vi/LC_MESSAGES/policycoreutils.mo
/usr/share/locale/vi_VN/LC_MESSAGES/policycoreutils.mo
/usr/share/locale/wo/LC_MESSAGES/policycoreutils.mo
/usr/share/locale/xh/LC_MESSAGES/policycoreutils.mo
/usr/share/locale/zh_CN.GB2312/LC_MESSAGES/policycoreutils.mo
/usr/share/locale/zh_CN/LC_MESSAGES/policycoreutils.mo
/usr/share/locale/zh_HK/LC_MESSAGES/policycoreutils.mo
/usr/share/locale/zh_TW.Big5/LC_MESSAGES/policycoreutils.mo
/usr/share/locale/zh_TW/LC_MESSAGES/policycoreutils.mo
/usr/share/locale/zu/LC_MESSAGES/policycoreutils.mo
/usr/share/man/man1/secon.1.gz
/usr/share/man/man5/selinux_config.5.gz
/usr/share/man/man5/sestatus.conf.5.gz
/usr/share/man/man8/fixfiles.8.gz
/usr/share/man/man8/genhomedircon.8.gz
/usr/share/man/man8/load_policy.8.gz
/usr/share/man/man8/restorecon.8.gz
/usr/share/man/man8/restorecon_xattr.8.gz
/usr/share/man/man8/semodule.8.gz
/usr/share/man/man8/semodule_expand.8.gz
/usr/share/man/man8/semodule_link.8.gz
/usr/share/man/man8/semodule_package.8.gz
/usr/share/man/man8/semodule_unpackage.8.gz
/usr/share/man/man8/sestatus.8.gz
/usr/share/man/man8/setfiles.8.gz
/usr/share/man/man8/setsebool.8.gz
/usr/share/man/ru/man1/secon.1.gz
/usr/share/man/ru/man5/selinux_config.5.gz
/usr/share/man/ru/man5/sestatus.conf.5.gz
/usr/share/man/ru/man8/fixfiles.8.gz
/usr/share/man/ru/man8/genhomedircon.8.gz
/usr/share/man/ru/man8/load_policy.8.gz
/usr/share/man/ru/man8/restorecon.8.gz
/usr/share/man/ru/man8/restorecon_xattr.8.gz
/usr/share/man/ru/man8/semodule.8.gz
/usr/share/man/ru/man8/semodule_expand.8.gz
/usr/share/man/ru/man8/semodule_link.8.gz
/usr/share/man/ru/man8/semodule_package.8.gz
/usr/share/man/ru/man8/semodule_unpackage.8.gz
/usr/share/man/ru/man8/sestatus.8.gz
/usr/share/man/ru/man8/setfiles.8.gz
/usr/share/man/ru/man8/setsebool.8.gz

References

Summary

In this tutorial we learn how to install policycoreutils on Fedora 34 using yum and dnf.