> Jan,
> 
> Doh. The '/selinux/enforce' was RHEL 6 - for Fedora 19 - it's
> '/sys/fs/selinux/enforce'

Yeah, that's why i would rather test just if current kernel has
selinuxfs loaded / mounted, without exact file location.

Jan.
--
Jan iankko Lieskovsky / Red Hat Security Technologies

> 
> -Frank
> 
> 
> On 10/04/2013 02:49 PM, [email protected] wrote:
> 
> 
> 
> Jan,
> 
> You might consider checking if the '/selinux/enforce' file exists and the
> file contains '1' (1 is enforcing). That would ensure that SELinux enabled
> and enforcing the policy.
> 
> Regards,
> 
> Frank Caviggia
> 
> 
> On 10/04/2013 01:11 PM, Jan Lieskovsky wrote:
> 
> 
> 
> Introduce new SELinux section of the guide and first rule
> for it - check if SELinux is enabled in currently
> booted kernel.
> 
> Please review.
> 
> Thank you && Regards, Jan.
> --
> Jan iankko Lieskovsky / Red Hat Security Technologies Team
> 
> 
> _______________________________________________
> scap-security-guide mailing list [email protected]
> https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide
> 
> 
> --
> Frank Caviggia
> Consultant, Public Sector [email protected] (M) (571) 295-4560
> 
> 
> _______________________________________________
> scap-security-guide mailing list [email protected]
> https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide
> 
> 
> --
> Frank Caviggia
> Consultant, Public Sector [email protected] (M) (571) 295-4560
> 
> _______________________________________________
> scap-security-guide mailing list
> [email protected]
> https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide
> 
_______________________________________________
scap-security-guide mailing list
[email protected]
https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide

Reply via email to