check_mk-check-selinux/agents/plugins/selinux

46 lines
1.9 KiB
Plaintext
Raw Normal View History

2018-06-11 18:05:21 +03:00
#!/bin/bash
# +------------------------------------------------------------------+
# | ____ _ _ __ __ _ __ |
# | / ___| |__ ___ ___| | __ | \/ | |/ / |
# | | | | '_ \ / _ \/ __| |/ / | |\/| | ' / |
# | | |___| | | | __/ (__| < | | | | . \ |
# | \____|_| |_|\___|\___|_|\_\___|_| |_|_|\_\ |
# | |
# | Copyright Mathias Kettner 2014 mk@mathias-kettner.de |
# +------------------------------------------------------------------+
#
# This file is part of Check_MK.
# The official homepage is at http://mathias-kettner.de/check_mk.
#
# check_mk is free software; you can redistribute it and/or modify it
# under the terms of the GNU General Public License as published by
# the Free Software Foundation in version 2. check_mk is distributed
# in the hope that it will be useful, but WITHOUT ANY WARRANTY; with-
# out even the implied warranty of MERCHANTABILITY or FITNESS FOR A
# PARTICULAR PURPOSE. See the GNU General Public License for more de-
# tails. You should have received a copy of the GNU General Public
# License along with GNU Make; see the file COPYING. If not, write
# to the Free Software Foundation, Inc., 51 Franklin St, Fifth Floor,
# Boston, MA 02110-1301 USA.
# Check SELinux status
# SELinux has three modes:
# - permissive
# - enforcing
# - disabled
# we are not looking at SELINUXPOLICY - although it may be of interest
# in the future
if command sestatus > /dev/null ; then
# Selinux status
2018-06-12 09:35:31 +03:00
status=`sestatus | grep "SELinux status:" | awk '{print $3}'`
2018-06-11 18:05:21 +03:00
# the current mode
2018-06-12 09:35:31 +03:00
curmode=`sestatus | grep "Current mode:" | awk '{print $3}'`
2018-06-11 18:05:21 +03:00
# the mode from file
2018-06-12 09:35:31 +03:00
filemode=`sestatus | grep "Mode from config file:" | awk '{print $5}'`
echo '<<<selinux>>>'
echo $status $curmode $filemode
2018-06-11 18:05:21 +03:00
fi