Show the current active checkreqprot state in sestatus Signed-off-by: Christian Göttsche <cgzo...@googlemail.com> --- policycoreutils/sestatus/sestatus.c | 14 ++++++++++++++ 1 file changed, 14 insertions(+)
diff --git a/policycoreutils/sestatus/sestatus.c b/policycoreutils/sestatus/sestatus.c index 2111b15d..f9ed5b66 100644 --- a/policycoreutils/sestatus/sestatus.c +++ b/policycoreutils/sestatus/sestatus.c @@ -330,6 +330,20 @@ int main(int argc, char **argv) break; } + printf_tab("Policy checkreqprot status:"); + rc = security_checkreqprot(); + switch (rc) { + case 0: + printf("kernel\n"); + break; + case 1: + printf("application\n"); + break; + default: + printf("error (%s)\n", strerror(errno)); + break; + } + rc = security_policyvers(); printf_tab("Max kernel policy version:"); if (rc < 0) -- 2.11.0 _______________________________________________ Selinux mailing list Selinux@tycho.nsa.gov To unsubscribe, send email to selinux-le...@tycho.nsa.gov. To get help, send an email containing "help" to selinux-requ...@tycho.nsa.gov.