`sestatus` ( 8 )

инструмент состояния SELinux (SELinux status tool)

Формат

Имя (Name)

sestatus - SELinux status tool

Синопсис (Synopsis)

sestatus [-v] [-b]

This tool is used to get the status of a system running SELinux.

Описание (Description)

This manual page describes the sestatus program.

This tool is used to get the status of a system running SELinux. It displays data about whether SELinux is enabled or disabled, location of key directories, and the loaded policy with its status as shown in the example: > sestatus SELinux status: enabled SELinuxfs mount: /selinux SELinux root directory: /etc/selinux Loaded policy name: targeted Current mode: permissive Mode from config file: enforcing Policy MLS status: enabled Policy deny_unknown status: allow Memory protection checking: actual (secure) Max kernel policy version: 26

sestatus can also be used to display:

- The security context of files and processes listed in the /etc/sestatus.conf file. The format of this file is described in sestatus.conf(5).

- The status of booleans.

Параметры (Options)

-v
              Displays the contexts of files and processes listed in the
              /etc/sestatus.conf file. It also checks whether the file
              is a symbolic link, if so then the context of the target
              file is also shown.

              The following contexts will always be displayed:
                     The current process context
                     The init process context
                     The controlling terminal file context

       -b
              Display the current state of booleans.

Файлы (Files)

/etc/sestatus.conf