Check status of selinux based on the output of the sestatus command. Updated for Checkmk 2.2 including a bakery plugin (so you can package and deploy).

The 1.0.0 mkp may still work with checkmk < 2.2 while the 1.1.2+ mkp is for checkmk 2.2.+

SELinux reference

The following (link)[https://github.com/SELinuxProject/selinux/blob/97fa708d867ecb26e8d1c766760947f8e3b9e59a/policycoreutils/sestatus/sestatus.c#L4] defines the output of the sestatus command.

State of booleans

sestatus accepts a -b flag which display the state of all selinux booleans. This is not covered but may be of interest in the future.