Security-enhanced Linux is a patch of the Linux kernel and a number of utilities with enhanced security functionality designed to add mandatory access controls to Linux. libpoldiff is a library to be used in conjunction with libapol to find "semantic" differences between policies. libpoldiff operates by breaking a policy into various 'policy items'.