Jan,
Doh. The '/selinux/enforce' was RHEL 6 - for Fedora 19 - it's
'/sys/fs/selinux/enforce'
Yeah, that's why i would rather test just if current kernel has
selinuxfs loaded / mounted, without exact file location.
Jan.
--
Jan iankko Lieskovsky / Red Hat Security Technologies
-Frank
On 10/04/2013 02:49 PM, fcaviggi(a)redhat.com wrote:
Jan,
You might consider checking if the '/selinux/enforce' file exists and the
file contains '1' (1 is enforcing). That would ensure that SELinux enabled
and enforcing the policy.
Regards,
Frank Caviggia
On 10/04/2013 01:11 PM, Jan Lieskovsky wrote:
Introduce new SELinux section of the guide and first rule
for it - check if SELinux is enabled in currently
booted kernel.
Please review.
Thank you && Regards, Jan.
--
Jan iankko Lieskovsky / Red Hat Security Technologies Team
_______________________________________________
scap-security-guide mailing list scap-security-guide(a)lists.fedorahosted.org
https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide
--
Frank Caviggia
Consultant, Public Sector fcaviggi(a)redhat.com (M) (571) 295-4560
_______________________________________________
scap-security-guide mailing list scap-security-guide(a)lists.fedorahosted.org
https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide
--
Frank Caviggia
Consultant, Public Sector fcaviggi(a)redhat.com (M) (571) 295-4560
_______________________________________________
scap-security-guide mailing list
scap-security-guide(a)lists.fedorahosted.org
https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide