check_selinux_status

Description

Overview

check_selinux_status.sh verifies that a system\’s SELinux status matches an administrator-defined expected state.

The plugin compares the current SELinux mode reported by getenforce against the configured expectation and returns Nagios status codes based on the severity of the mismatch.

Features

• Verifies SELinux state is Enforcing, Permissive, or Disabled
• Compares current state to administrator-defined expectation
• Returns OK when the state matches
• Returns WARNING for lower-severity deviations
• Returns CRITICAL for higher-severity deviations
• Handles missing or invalid SELinux status information
• Lightweight Bash implementation

Example Commands

• check_selinux_status.sh -s enforcing
• check_selinux_status.sh -s permissive
• check_selinux_status.sh -s disabled

Project Details