1sestatus(8)           SELinux command line documentation           sestatus(8)
2
3
4

NAME

6       sestatus - SELinux status tool
7
8

SYNOPSIS

10       sestatus [-v] [-b]
11
12       This tool is used to get the status of a system running SELinux.
13
14

DESCRIPTION

16       This manual page describes the sestatus program.
17
18       This  tool  is  used  to get the status of a system running SELinux. It
19       displays data about whether SELinux is enabled or disabled, location of
20       key  directories, and the loaded policy with its status as shown in the
21       example:
22              > sestatus
23              SELinux status:              enabled
24              SELinuxfs mount:             /selinux
25              SELinux root directory:      /etc/selinux
26              Loaded policy name:          targeted
27              Current mode:                permissive
28              Mode from config file:       enforcing
29              Policy MLS status:           enabled
30              Policy deny_unknown status:  allow
31              Memory protection checking:  actual (secure)
32              Max kernel policy version:   26
33
34       sestatus can also be used to display:
35
36              -   The security context of files and processes  listed  in  the
37                  /etc/sestatus.conf   file.   The  format  of  this  file  is
38                  described in sestatus.conf(5).
39
40              -   The status of booleans.
41
42

OPTIONS

44       -v
45              Displays the contexts of  files  and  processes  listed  in  the
46              /etc/sestatus.conf  file.  It  also checks whether the file is a
47              symbolic link, if so then the context of the target file is also
48              shown.
49
50              The following contexts will always be displayed:
51                     The current process context
52                     The init process context
53                     The controlling terminal file context
54
55       -b
56              Display the current state of booleans.
57
58

FILES

60       /etc/sestatus.conf
61
62

AUTHOR

64       This man page was written by Daniel Walsh <dwalsh@redhat.com>.
65       The program was written by Chris PeBenito <pebenito@gentoo.org>
66
67

SEE ALSO

69       selinux(8), sestatus.conf(5)
70
71
72
73
74Security Enhanced Linux           26 Nov 2011                      sestatus(8)