fapolicy-analyzer

KO | EN

gitlite — search

#hacktoberfest #react #typescript #deep-learning #docker #macos #nodejs #windows #awesome #pytorch #security #mcp #openai #open-source

fapolicy-analyzer

(★ 19)

Tools to assist with the configuration and management of fapolicyd.

fapolicy-analyzer 최신버젼 다운로드

최종 버전 다운로드 (.zip)

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

<div align="center">
  <h1><samp>File Access Policy Analyzer</samp></h1>

<p>
<strong>Tools to assist with the configuration and management of <a href="https://github.com/linux-application-whitelisting/fapolicyd">fapolicyd</a></strong>
</p>

</div>

## Features

1. Rule editor with syntax highlighting, syntax validation, and policy linting
2. Trust database manager to synchronize what fapolicyd believes and what exists on disk
3. Log analyzer provides insight to help understand and tune fapolicyd runtime behavior
4. Disk access profiler to capture file access requests for an executing application
5. Configuration file editor for fapolicyd, with syntax validation and linting
6. DBUS based control of the fapolicyd daemon which is immune to bad policy lockout

See the [**User Guide**][1] for details.

## Building

The Policy Analyzer builds and runs with [**`uv`**](https://github.com/astral-sh/uv?tab=readme-ov-file#installation).

See [BUILD.md](BUILD.md) for environment setup and build instructions.

## Installation

You can install the Policy Analyzer in one of the following ways

<summary>From Fedora Packages</summary>

This installation method is currently available for Fedora EPEL 8, EPEL 9, and Fedora 37 or later, including Rawhide.

```sh
dnf install fapolicy-analyzer
```

</details>

<summary>From GitHub releases</summary>

[![GitHub latest release](https://shields.io/github/v/release/ctc-oss/fapolicy-analyzer?color=3c6eb4&display_name=tag&sort=semver&label=Stable&logo=github)](https://github.com/ctc-oss/fapolicy-analyzer/releases/latest)
[![GitHub Latest pre-release)](https://img.shields.io/github/v/release/ctc-oss/fapolicy-analyzer?color=3c6eb4&include_prereleases&label=Beta&logo=github)](https://github.com/ctc-oss/fapolicy-analyzer/releases)
![GitHub downloads](https://img.shields.io/github/downloads/ctc-oss/fapolicy-analyzer/total?color=3c6eb4&logo=github)

You can install the Policy Analyzer through the installers available in
the [latest release](https://github.com/ctc-oss/fapolicy-analyzer/releases). <br>
Choose an RPM from the latest Fedora stable, Rawhide, and EPEL builds. <br>

</details>

<summary>From Fedora Copr</summary>

The Copr repository contains the latest development builds and release builds prior to publishing to the Fedora
repositories.

Follow this method to install a prerelease package.

### Add Copr repository

Install the ctc-oss repo with

```sh
dnf install dnf-plugins-core
dnf copr enable ctc-oss/fapolicy-analyzer
```

### Copr Release builds

Releases packages of the Policy Analyzer are generally available from Copr a week before being available from Fedora.

The Policy Analyzer can be installed from the ctc-oss repository with the normal process

`dnf install fapolicy-analyzer`

### Copr pre-release builds

Pre-release packages of the Policy Analyzer for all targets are created using the latest commit to master.

Use the `dev` tag + the commit number from the `master` branch, for example

`dnf install fapolicy-analyzer-1.0.0~dev308`

will install the prerelease 1.0.0 version at the 308th commit on the master branch.

</details>

<summary>From a containerized build environment</summary>

Follow this method only if you have cloned the GitHub repository and have Podman installed

- `make fc-rpm` to build a Rawhide RPM
- `make el-rpm` to build a RHEL 8 RPM

After a successful build the container will copy the RPMs into the host `/tmp` directory.

</details>

<summary>From a local development environment</summary>

Follow this method only if you have installed all required build tools

`make run`

See [BUILD.md](BUILD.md) for required dependencies.

</details>

## fapolicyd

Compatible with v1.0+

The [![fapolicyd-badge](https://img.shields.io/github/labels/ctc-oss/fapolicy-analyzer/fapolicyd-feature?style=flat)][2]
label tracks support for specific [capability][3].

### fapolicyd.conf

Analyzing from syslog requires the following `syslog_format` entry:

```
syslog_format = rule,dec,perm,uid,gid,pid,exe,:,path,ftype,trust
```

## Getting Help

- See the [Known Issues](https://github.com/ctc-oss/fapolicy-analyzer/wiki/Known-Issues)
- Start a [Discussion](https://github.com/ctc-oss/fapolicy-analyzer/discussions)
- Create a new [Issue](https://github.com/ctc-oss/fapolicy-analyzer/issues)

## License

GPL v3

[1]: https://github.com/ctc-oss/fapolicy-analyzer/wiki/User-Guide

[2]: https://github.com/ctc-oss/fapolicy-analyzer/labels/fapolicyd-feature

[3]: https://github.com/linux-application-whitelisting/fapolicyd/blob/main/ChangeLog

fapolicy-analyzer

fapolicy-analyzer 최신버젼 다운로드

오늘의 추천 프로젝트

Was this content helpful?

Recent Feedback

fapolicy-analyzer

fapolicy-analyzer 최신버젼 다운로드

오늘의 추천 프로젝트

Was this content helpful?

Recent Feedback

Download README