## SELinux Support
This directory includes a sample SELinux configuration.

### Installation
1. After installing Agent Proxy, run `sepolicy generate --init /path/to/installed/agent_proxy` from anywhere outside this directory to generate a default custom policy for Agent Proxy.
2. Modify the newly-generated `aembit_agent_proxy.te` to include the rules from this directory (`selinux/aembit_agent_proxy.te`).
3. Apply your newly-generated custom policy with `/path/to/generated/aembit_agent_proxy.sh`.
4. Restart Agent Proxy with `sudo systemctl restart aembit_agent_proxy`.
5. Verify Agent Proxy is now confined by SELinux with `ps -efZ | grep aembit_agent_proxy`.
6. Verify there are no access violations with `ausearch -m AVC -ts recent`.
