1sestatus(8)           SELinux command line documentation           sestatus(8)
2
3
4

NAME

6       sestatus - SELinux status tool
7
8

SYNOPSIS

10       sestatus [-v] [-b]
11
12       This tool is used to get the status of a system running SELinux.
13
14

DESCRIPTION

16       This manual page describes the sestatus program.
17
18       This  tool  is  used  to get the status of a system running SELinux. It
19       displays data about whether SELinux is enabled or disabled, location of
20       key  directories, and the loaded policy with its status as shown in the
21       example:
22              > sestatus
23              SELinux status:              enabled
24              SELinuxfs mount:             /selinux
25              SELinux root directory:      /etc/selinux
26              Loaded policy name:          targeted
27              Current mode:                permissive
28              Mode from config file:       enforcing
29              Policy MLS status:           enabled
30              Policy deny_unknown status:  allow
31              Max kernel policy version:   26
32
33       sestatus can also be used to display:
34
35              -   The security context of files and processes  listed  in  the
36                  /etc/sestatus.conf   file.   The  format  of  this  file  is
37                  described in sestatus.conf(5).
38
39              -   The status of booleans.
40
41

OPTIONS

43       -v
44              Displays the contexts of  files  and  processes  listed  in  the
45              /etc/sestatus.conf  file.  It  also checks whether the file is a
46              symbolic link, if so then the context of the target file is also
47              shown.
48
49              The following contexts will always be displayed:
50                     The current process context
51                     The init process context
52                     The controlling terminal file context
53
54       -b
55              Display the current state of booleans.
56
57

FILES

59       /etc/sestatus.conf
60
61

AUTHOR

63       This man page was written by Daniel Walsh <dwalsh@redhat.com>.
64       The program was written by Chris PeBenito <pebenito@gentoo.org>
65
66

SEE ALSO

68       selinux(8), sestatus.conf(5)
69
70
71
72
73Security Enhanced Linux           26 Nov 2011                      sestatus(8)