selinux_getenforcemode(3)

📦 version 3.11, in alpine 3.24, centos-stream 10, centos-stream 9, debian bookworm, debian trixie, fedora 43, fedora 44, nixos 26.05, nixpkgs unstable, opensuse-leap 16.0, ubuntu jammy, ubuntu noble, ubuntu questing, ubuntu resolute, ubuntu stonking

okay bestie, welcome to selinux_getenforcemode(3) from the SELinux API documentation 🫶 we're gonna check how the system was set up to run SELinux, and honestly it's giving config-file detective energy 🔍✨

✨ NAME ✨

selinux_getenforcemode — get the enforcing state of SELinux 💅

🌸 SYNOPSIS 🌸

#include <selinux/selinux.h>

int selinux_getenforcemode(int *enforce);

🦋 DESCRIPTION 🦋

so selinux_getenforcemode() reads the contents of /etc/selinux/config to figure out how the system was set up to run SELinux. no cap. then it sets the value of enforce based on what it finds:

  • sets the value of enforce to 1 if SELinux should be run in enforcing mode 👑
  • sets the value of enforce to 0 if SELinux should be run in permissive mode 🙈
  • sets the value of enforce to -1 if SELinux should be disabled 💀

🎀 RETURN VALUE 🎀

on success, zero is returned. on failure, -1 is returned. periodt 💅

🌈 SEE ALSO 🌈

selinux(8) — go read that too, bestie 📖

this page was brought to you by dwalsh@redhat.com, dated 25 May 2004, and it's the selinux_getenforcemode(3) manual page. mwah 💋

📦 where this page comes from