Comment by westurner

From https://news.ycombinator.com/item?id=30025477 :

> [ audit2allow, https://stopdisablingselinux.com/ ]

Applications don't need to be compiled with selinux libraries unless they want to bypass CLI tools like chcon and restorecon (which set extended filesystem attributes according to the system policy; typically at package install time if the package provenance is sufficient) by linking with libselinux.