From: David King <dking@xxxxxxxxxx> Improve the description by mentioning that if is_selinux_mls_enabled(), it simply means that the kernel has MLS support and the policy contains MLS features. To check whether MLS support is enabled on the running system, use selinux_getpolicytype(). Signed-off-by: David King <dking@xxxxxxxxxx> --- libselinux/man/man3/is_selinux_enabled.3 | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/libselinux/man/man3/is_selinux_enabled.3 b/libselinux/man/man3/is_selinux_enabled.3 index b2df562..df62c22 100644 --- a/libselinux/man/man3/is_selinux_enabled.3 +++ b/libselinux/man/man3/is_selinux_enabled.3 @@ -18,7 +18,9 @@ returns 1 if SELinux is running or 0 if it is not. On error, \-1 is returned. .BR is_selinux_mls_enabled () -returns 1 if SELinux is running in MLS mode or 0 if it is not. +returns 1 if SELinux is capable of running in MLS mode or 0 if it is not. To +determine the policy in use on the system, use +.BR selinux_getpolicytype (3). . .SH "SEE ALSO" .BR selinux "(8)" -- 2.7.4 _______________________________________________ Selinux mailing list Selinux@xxxxxxxxxxxxx To unsubscribe, send email to Selinux-leave@xxxxxxxxxxxxx. To get help, send an email containing "help" to Selinux-request@xxxxxxxxxxxxx.