---
name: "sestatus.conf"
section: "5"
platform: "linux"
package: "policycoreutils"
version: "3.8.1-2"
release: "Debian 13 (Trixie)"
platforms: ["linux"]
url: "https://new.carta.tech/sestatus.conf"
---

# sestatus.conf(5)

The sestatus(8) configuration file.

## NAME

sestatus.conf - The [**sestatus**(8)](/sestatus/8.md) configuration file.

## DESCRIPTION

The *sestatus.conf* file is used by the [**sestatus**(8)](/sestatus/8.md) command with the **-v** option to determine what file and process security contexts should be displayed.

The fully qualified path name of the configuration file is:

*/etc/sestatus.conf*

The file consists of two optional sections as described in the **FILE FORMAT** section. Whether these exist or not, the following will always be displayed:

The current process context\
 The init process context\
 The controlling terminal file context

## FILE FORMAT

The format consists of two optional sections as follows:

**\[files\]**\
 *file\_name*\
 *\[file\_name\]*\
 *...*

**\[process\]**\
 *executable\_file\_name*\
 *\[executable\_file\_name\]*\
 *...*

Where:

**\[files\]**

The start of the file list block.

*file\_name*

One or more fully qualified file names, each on a new line will that will have its context displayed. If the file does not exist, then it is ignored. If the file is a symbolic link, then **sestatus -v** will also display the target file context.

**\[process\]**

The start of the process list block.

*executable\_file\_name*

One or more fully qualified executable file names that should it be an active process, have its context displayed. Each entry is on a new line.

## EXAMPLE

\# /etc/sestatus.conf\
 \[files\]\
 /etc/passwd\
 /etc/shadow\
 /bin/bash\
 /bin/login\
 /lib/libc.so.6\
 /lib/ld-linux.so.2\
 /lib/ld.so.1

\[process\]\
 /sbin/mingetty\
 /sbin/agetty\
 /usr/sbin/sshd

## SEE ALSO

[**selinux**(8)](/selinux/8.md), [**sestatus**(8)](/sestatus/8.md)