sestatus(8)

💅 sestatus(8) — the SELinux status tool, bestie edition

okay so you're here because you wanna know what's going on with SELinux on your box, and sestatus is literally the girl for the job. she's part of the SELinux command line documentation family. let's get into it 💖

✨ NAME ✨

sestatus — SELinux status tool

🎀 SYNOPSIS 🎀

sestatus [-v] [-b]

This tool is used to get the status of a system running SELinux.

🦋 DESCRIPTION 🦋

This manual page describes the sestatus program. (yes bestie, a man page describing a program, we love a self-aware queen 👑)

So what does it actually do? This tool is used to get the status of a system running SELinux. It displays data about whether SELinux is enabled or disabled, the location of key directories, and the loaded policy with its status — as shown in the example:

> sestatus
SELinux status:              enabled
SELinuxfs mount:             /selinux
SELinux root directory:      /etc/selinux
Loaded policy name:          targeted
Current mode:                permissive
Mode from config file:       enforcing
Policy MLS status:           enabled
Policy deny_unknown status:  allow
Memory protection checking:  actual (secure)
Max kernel policy version:   26

look at that output. stunning. no notes. ✨

sestatus can also be used to display:

• The security context of files and processes listed in the /etc/sestatus.conf file. The format of this file is described in sestatus.conf(5).
• The status of booleans.

🌸 OPTIONS 🌸

• -v — Displays the contexts of files and processes listed in the /etc/sestatus.conf file. It also checks whether the file is a symbolic link, and if so, then the context of the target file is also shown. 🫶

The following contexts will always be displayed:

• The current process context
• The init process context
• The controlling terminal file context

• -b — Display the current state of booleans. 🍓

💜 FILES 💜

• /etc/sestatus.conf

🌈 AUTHOR 🌈

This man page was written by Daniel Walsh <dwalsh@redhat.com>. The program was written by Chris PeBenito <pebenito@gentoo.org>

(iconic duo behaviour, honestly 👑✨)

⭐ SEE ALSO ⭐

selinux(8), sestatus.conf(5)

fr fr, if you're ever confused about why something got denied, run sestatus first. vibe check your SELinux before you start blaming everyone else 💀

okay that's the whole page, hope it ate 💅 this one's from the Security Enhanced Linux crew, dated 26 Nov 2011, and it's sestatus(8) — mwah, periodt 💖🌸