Check status of selinux based on the output of the sestatus command. Updated for Checkmk 2.2 including a bakery plugin (so you can package and deploy).

The 1.0.0 mkp may still work with checkmk < 2.2 while the 1.1.2+ mkp is for checkmk 2.2.+

SELinux reference

The following (link)[97fa708d86/policycoreutils/sestatus/sestatus.c (L4)] defines the output of the sestatus command.

State of booleans

sestatus accepts a -b flag which display the state of all selinux booleans. This is not covered but may be of interest in the future.