Adoptable Cookbooks List

Looking for a cookbook to adopt? You can now see a list of cookbooks available for adoption!
List of Adoptable Cookbooks

Supermarket Belongs to the Community

Supermarket belongs to the community. While Chef has the responsibility to keep it running and be stewards of its functionality, what it does and how it works is driven by the community. The chef/supermarket repository will continue to be where development of the Supermarket application takes place. Come be part of shaping the direction of Supermarket by opening issues and pull requests or by joining us on the Chef Mailing List.

Select Badges

Select Supported Platforms

Select Status


selinux (60) Versions 6.0.0

Manages SELinux policy state and rules.

cookbook 'selinux', '= 6.0.0', :supermarket
cookbook 'selinux', '= 6.0.0'
knife supermarket install selinux
knife supermarket download selinux
Quality 100%

SELinux Cookbook

Cookbook Version
CI State


The SELinux (Security Enhanced Linux) cookbook provides recipes for manipulating SELinux policy enforcement state.

SELinux can have one of three settings:


  • Watches all system access checks, stops all 'Denied access'
  • Default mode on RHEL systems


  • Allows access but reports violations


  • Disables SELinux from the system but is only read at boot time. If you set this flag, you must reboot.

Disable SELinux only if you plan to not use it. Use Permissive mode if you just need to debug your system.


  • Chef 15.3 or higher


  • RHEL 7+
  • CentOS 7+
  • Fedora
  • Ubuntu
  • Debian


The following resources are provided:

  • [selinux_boolean](documentation/
  • [selinux_fcontext](documentation/
  • [selinux_install](documentation/
  • [selinux_module](documentation/
  • [selinux_permissive](documentation/
  • [selinux_port](documentation/
  • [selinux_state](documentation/


This cookbook is maintained by the Sous Chefs. The Sous Chefs are a community of Chef cookbook maintainers working together to maintain important cookbooks. If you’d like to know more please visit or come chat with us on the Chef Community Slack in #sous-chefs.


This project exists thanks to all the people who contribute.


Thank you to all our backers!


Support this project by becoming a sponsor. Your logo will show up here with a link to your website.

Dependent cookbooks

This cookbook has no specified dependencies.

Contingent cookbooks

abiquo Applicable Versions
base_install Applicable Versions
centos-test Applicable Versions
cheftest Applicable Versions
cloudless-box Applicable Versions
cloudstack_wrapper Applicable Versions
consul Applicable Versions
corosync-cookbook Applicable Versions
crenv Applicable Versions
dcos Applicable Versions
django_platform Applicable Versions
drupal-cookbook Applicable Versions
eucalyptus Applicable Versions
greysystems-mongodb Applicable Versions
hadoop Applicable Versions
hashicorp-vault Applicable Versions
hdp-cloud Applicable Versions
k8s Applicable Versions
kafka-cluster Applicable Versions
katello Applicable Versions
kube_cluster Applicable Versions
kubernetes Applicable Versions
linux-basic Applicable Versions
linux_basic Applicable Versions
mariadb Applicable Versions
nc_base Applicable Versions
openstack-block-storage Applicable Versions
openstack-common Applicable Versions
paramount Applicable Versions
realmd-sssd Applicable Versions
redisio Applicable Versions
spree Applicable Versions
tungsten Applicable Versions
wordpress Applicable Versions
zenoss Applicable Versions
zookeeper-cluster Applicable Versions

selinux Cookbook CHANGELOG

This file is used to list changes made in each version of the selinux cookbook.

6.0.0 - 2021-09-02

  • Import selinux_policy resources into this cookbook (_fcontext, _permissive, and _port)
    • selinux_policy_module not imported since it is a duplicate of selinux_module


  • selinux_fcontext action addormodify renamed to manage
  • selinux_port action addormodify renamed to manage

5.1.1 - 2021-08-30

  • Standardise files with files in sous-chefs/repo-management

5.1.0 - 2021-08-21

  • Fix selinux_install on Alma Linux / Oracle Linux

5.0.0 - 2021-08-10

Note: With version 5.0.0 the default recipe has been removed

  • Major refactoring
  • Restore support for Debian based distros
  • All resources now use unified_mode
  • Added selinux_boolean resource
  • Remove attributes and default recipe
    • Replaced with a set of bare recipes for the three selinux states
  • Add automatic restart function to selinux_state resource

4.0.0 - 2021-07-21

  • Sous Chefs adoption
  • Enable unified_mode for Chef 17 compatibility
  • Update test platforms

3.1.1 (2020-09-29)

  • Move default['selinux']['status'] attribute to default['selinux']['state'] to avoid conflicts with Ohai in Chef Infra Client 16 - @shoekstra

3.1.0 (2020-09-29)

  • Cookstyle Bot Auto Corrections with Cookstyle 6.16.8 - @cookstyle
  • Add a new node['selinux']['install_mcstrans_package'] attribute to control installation of the mcdtrans package. This default to true to maintain existing functionality. - @kapilchouhan99

3.0.2 (2020-08-25)

  • Fix failures in CI- @shoekstra
  • Specify platform to SoloRunner - @shoekstra
  • Remove unnecessary Foodcritic comments - @tas50
  • Notify :immediately not :immediate - @tas50
  • Add Github actions testing of style/unit - @tas50
  • [GH-67] - Do not try to modify frozen checksum - @vzDevelopment
  • Standardise files with files in chef-cookbooks/repo-management - @xorimabot

3.0.1 (2019-11-14)

  • Remove the deprecated ChefSpec report - @tas50
  • Allow "-" and "_" for module names - @ramereth
  • Update Fedora versions we test on - @tas50

3.0.0 (2019-06-06)

  • Support for SELinux Modules, via new resource selinux_module, able to compile .te files, install and remove modules;
  • Improving test coverage for all resources
  • Remove support for Ubuntu/Debian
  • Require Chef 13+

2.1.1 (2018-06-07)

  • Do not execute setenforce 1 always
  • Remove chefspec matchers that are autogenerated now
  • Chef 13 Fixes

2.1.0 (2017-09-15)

  • Simplify Travis config and fix ChefDK 2.0 failures
  • Use bento slugs in Kitchen
  • Remove maintainer files
  • More cleanup of the maintainer files
  • Speed up install with multi-package install

2.0.3 (2017-06-13)

  • Fix boolean check within default recipe

2.0.2 (2017-06-05)

  • Permissive guard should grep for permissive not just disabled

2.0.1 (2017-05-30)

  • Remove class_eval usage

2.0.0 (2017-05-15)

  • Deprecate debian family support
  • Make default for rhel family use setenforce regardless of whether a temporary change or not. Eliminates the requirement for a required reboot to effect change in the running system.

1.0.4 (2017-04-17)

  • Switch to local delivery for testing
  • Use the standard apache license string
  • Updates for early Chef 12 and Chef 13 compatibility
  • Update and add copyright blocks to the various files

1.0.3 (2017-03-14)

  • Fix requirement in metadata to reflect need for Chef 12.7 as using action_class in state resource.

1.0.2 (2017-03-01)

  • Remove setools* packages from install resource (utility to analyze and query policies, monitor and report audit logs, and manage file context). Future versions of this cookbook that might use this need to handle package install on Oracle Linux as not available in default repo.

1.0.1 (2017-02-26)

  • Fix logic error in the permissive state change

1.0.0 (2017-02-26)

  • BREAKING CHANGE node['selinux']['state'] is now node['selinux']['status'] to meet Chef 13 requirements.
  • Update to current cookbook engineering standards
  • Rewrite LWRP to 12.5 resources
  • Resolved cookstyle errors
  • Update package information for debian based on

    • selinux-activate looks like it's required to ACTUALLY activate selinux on non-RHEL systems. This seems like it could be destructive if unexpected.
  • Add property temporary to allow for switching between permissive and enabled

  • Add install resource

v0.9.0 (2015-02-22)

  • Initial Debian / Ubuntu support
  • Various bug fixes

v0.8.0 (2014-04-23)

  • [COOK-4528] - Fix selinux directory permissions
  • [COOK-4562] - Basic support for Ubuntu/Debian

v0.7.2 (2014-03-24)

handling minimal installs

v0.7.0 (2014-02-27)

[COOK-4218] Support setting SELinux boolean values


  • Fixing bug introduced in 0.6.0
  • adding basic test-kitchen coverage


  • [COOK-760] - selinux enforce/permit/disable based on attribute


  • [COOK-2124] - enforcing recipe fails if selinux is disabled


  • [COOK-1277] - disabled recipe fails on systems w/o selinux installed


  • [COOK-789] - fix dangling commas causing syntax error on some rubies


  • [COOK-678] - add the selinux cookbook to the repository
  • Use main selinux config file (/etc/selinux/config)
  • Use getenforce instead of selinuxenabled for enforcing and permissive

Collaborator Number Metric

6.0.0 passed this metric

Contributing File Metric

6.0.0 passed this metric

Foodcritic Metric

6.0.0 passed this metric

No Binaries Metric

6.0.0 passed this metric

Testing File Metric

6.0.0 passed this metric

Version Tag Metric

6.0.0 passed this metric