sestatus
Section: SELinux command line documentation (8)
Updated: 26 Nov 2011
Index
Return to Main Contents
NAME
sestatus - SELinux status tool
SYNOPSIS
sestatus
[-v] [-b]
This tool is used to get the status of a system running SELinux.
DESCRIPTION
This manual page describes the
sestatus
program.
This tool is used to get the status of a system running SELinux. It displays data about whether SELinux is enabled or disabled, location of key directories, and the loaded policy with its status as shown in the example:
-
> sestatus
SELinux status: enabled
SELinuxfs mount: /selinux
SELinux root directory: /etc/selinux
Loaded policy name: targeted
Current mode: permissive
Mode from config file: enforcing
Policy MLS status: enabled
Policy deny_unknown status: allow
Memory protection checking: actual (secure)
Max kernel policy version: 26
sestatus can also be used to display:
-
- -
-
The security context of files and processes listed in the /etc/sestatus.conf file. The format of this file is described in sestatus.conf(5).
- -
-
The status of booleans.
OPTIONS
-v
-
Displays the contexts of files and processes listed in the /etc/sestatus.conf file. It also checks whether the file is a symbolic link, if so then the context of the target file is also shown.
The following contexts will always be displayed:
-
The current process context
The init process context
The controlling terminal file context
-b
-
Display the current state of booleans.
FILES
/etc/sestatus.conf
AUTHOR
This man page was written by Daniel Walsh <dwalsh@redhat.com>.
The program was written by Chris PeBenito <pebenito@gentoo.org>
SEE ALSO
selinux(8), sestatus.conf(5)
Index
- NAME
-
- SYNOPSIS
-
- DESCRIPTION
-
- OPTIONS
-
- FILES
-
- AUTHOR
-
- SEE ALSO
-
This document was created by
man2html,
using the manual pages.
Time: 16:21:58 GMT, May 18, 2024