SELinux Operation Mode via Relevance?

Is it possible to obtain the Linux Operation Mode via relevance? It would be ideal to avoid having to output to output this to a text file and reading that text file.

image

I think the only real way to do this would be a Fixlet with:

wait sestatus >> sestatus.log

And then an analysis to read that log file.

It’s not something that’s native retrieved by any relevance query.

Sadly not avoidable :frowning:

I was actually able to solve this without outputting to a file and having to read that. I used the relevance clause below and was able to pull it from the respected endpoints. Hope this helps someone down the road.

line starting with "SELINUX=" of file "/etc/selinux/config"
5 Likes

Another approach option that may save string parsing

Q: keys "SELINUX" of file "/etc/selinux/config"
A: enforcing
5 Likes

Much cleaner. Thanks @SLB!

1 Like

This is why I love the forum and the community behind it, every day is a learning day :smiley:

4 Likes