CODEWITHSUNDEEP
bashcentos7
Red Virus
Red Virus

Reputation: 1707

Check SeLinux Status

Using the following code I would like to check the status of SeLinux e.g. enforcing, permissive, disabled. If the status is other then disabled, then I will advise the user to disable Selinux.

I'm running the following in a .sh file. The current status of SeLinux is Permissive. Running the following code ends up in the else clause.

#! /bin/bash

SELINUXSTATUS=getenforce;

if [ "$SELINUXSTATUS" == "Permissive" ]; then
    echo "Disable SeLinux";
else
    echo "All Good. Continue...";
fi;

Upvotes: 3

Views: 5070

Answers (3)

Дмитрий Шатов
Дмитрий Шатов

Reputation: 129

You must use SELINUXSTATUS=$(getenforce). Now your variable SELINUXSTATUS is just string "getenforce".

Upvotes: 2

Stephen C
Stephen C

Reputation: 718678

As @Jon says:

    SELINUXSTATUS=$(getenforce)

runs the getenforce commandf, captures its output and sets the variable to that value. Alternately,

    SELINUXSTATUS=`getenforce`

does the same thing. (Note that those are back-ticks ... not regular single quotes.)

But be aware that there are three possible results from getenforce; i.e. Disabled, Permissive and Enforcing.

Upvotes: 2

Jon
Jon

Reputation: 3671

Try

SELINUXSTATUS=$(getenforce)

Currently, your script will just set SELINUXSTATUS to the literal string getenforce. $(command) is the magic in bash which runs a command and captures its output.

Upvotes: 5

Related Questions