Documentation of SELinux CIL compiler

edit

Maybe this is not for "noob"s.

You can download and install the documentation for secilc:

dnf install secilc-doc

and then open the the file /usr/share/doc/secilc-doc/html/CIL_Reference_Guide.html with your browser. This, however, is a lot of read with a lot of details.

A better starting point may be the wiki fir the CIL project: https://github.com/SELinuxProject/cil/wiki

By the way, you can convert a .te file generated by audit2allow to cil format

checkmodule -C -m -o "$module".cil "$module".te

and the .cil file can be installed directly instead of the .pp file.

semodule -i "$module".cil

That may be handy if you modify the .te file with an editor. You can also modify the .cil file with an editor.