Method getSELinuxStatus

agent-source-code/internal/system/system.go:332–373

getSELinuxStatus gets SELinux status using file reading

()

// getSELinuxStatus gets SELinux status using file reading
func (d *Detector) getSELinuxStatus() string {
	// Windows and FreeBSD don't use SELinux
	if runtime.GOOS == "windows" || d.isFreeBSD() {
		return constants.SELinuxDisabled
	}

	// Try getenforce command first
	if cmd := exec.Command("getenforce"); cmd != nil {
		if output, err := cmd.Output(); err == nil {
			status := strings.ToLower(strings.TrimSpace(string(output)))
			// Map "enforcing" to "enabled" for server validation
			if status == constants.SELinuxEnforcing {
				return constants.SELinuxEnabled
			}
			if status == constants.SELinuxPermissive {
				return constants.SELinuxPermissive
			}
			return status
		}
	}

	// Fallback to reading config file
	if data, err := os.ReadFile("/etc/selinux/config"); err == nil {
		scanner := bufio.NewScanner(strings.NewReader(string(data)))
		for scanner.Scan() {
			line := strings.TrimSpace(scanner.Text())
			if value, found := strings.CutPrefix(line, "SELINUX="); found {
				status := strings.ToLower(strings.Trim(value, "\"'"))
				// Map "enforcing" to "enabled" for server validation
				if status == constants.SELinuxEnforcing {
					return constants.SELinuxEnabled
				}
				if status == constants.SELinuxPermissive {
					return constants.SELinuxPermissive
				}
				return status
			}
		}
	}

	return constants.SELinuxDisabled
}

// getSystemUptime gets system uptime
func (d *Detector) getSystemUptime(ctx context.Context) string {