fapolicyd on Linux in 2026: Application Allowlisting on RHEL and Fedora Without Locking Yourself Out
A practical 2026 guide to fapolicyd on RHEL and Fedora: how it uses fanotify to gate execve, how to write rules that don't lock you out, the safe permissive-to-enforce rollout, and how it maps to CIS, STIG, and PCI DSS compliance.