topjohnwu/selinux
1
0
Fork 0
mirror of https://github.com/topjohnwu/selinux.git synced 2025-02-13 07:37:03 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

sestatus: show checkreqprot status

Browse Source 
Show the current active checkreqprot state in sestatus
This commit is contained in:
Christian Göttsche 2017-05-06 15:08:48 +02:00 committed by Stephen Smalley
parent d1ff68ffee
commit 3376ac498e
2 changed files with 16 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
policycoreutils/sestatus/sestatus.8
View File

@ -33,6 +33,8 @@ Policy MLS status: enabled
.br
Policy deny_unknown status: allow
.br
Memory protection checking: actual (secure)
.br
Max kernel policy version: 26
.RE
.sp

14
policycoreutils/sestatus/sestatus.c
View File

@ -330,6 +330,20 @@ int main(int argc, char **argv)
break;
}
printf_tab("Memory protection checking:");
rc = security_get_checkreqprot();
switch (rc) {
case 0:
printf("actual (secure)\n");
break;
case 1:
printf("requested (insecure)\n");
break;
default:
printf("error (%s)\n", strerror(errno));
break;
}
rc = security_policyvers();
printf_tab("Max kernel policy version:");
if (rc < 0)