3
4
5
6
7
8
9
10
11
|
# File 'lib/specinfra/command/linux/base/selinux.rb', line 3
def check_has_mode(mode, policy = nil)
cmd = ""
cmd += "test ! -f /etc/selinux/config || ( " if mode == "disabled"
cmd += "(getenforce | grep -i -- #{escape(mode)})"
cmd += " || (getenforce | grep -i -- #{escape('permissive')}) )" if mode == "disabled"
cmd += %Q{ && grep -iE -- '^\\s*SELINUX=#{escape(mode)}\\>' /etc/selinux/config}
cmd += %Q{ && grep -iE -- '^\\s*SELINUXTYPE=#{escape(policy)}\\>' /etc/selinux/config} if policy != nil
cmd
end
|