cluster: check both SELinux status and config

[dveeden]

What problem does this PR solve?

Currently tiup cluster check only checks if SELinux is configured to be disabled. It does not check the current status.

What is changed and how it works?

This now adds a second check (CheckSELinuxStatus) and renames the first one to CheckSELinuxConf.

Another option would be to roll both into CheckSELinux

Check List

Tests

• Manual test (add detailed scripts or steps below)

tiup-cluster check topology.yaml --apply
...
192.168.122.196  selinux_conf    Fail    will try to disable SELinux, reboot might be needed
192.168.122.196  selinux_status  Fail    will try to disable SELinux, reboot might be needed
...
+ Try to apply changes to fix failed checks
  - Applying changes on 192.168.122.196 ... ⠦ Shell: host=192.168.122.196, sudo=true, command=`sed -i 's/^[[:blank:]]*SELINUX=enforcing/...

tiup-cluster check topology.yaml
192.168.122.196  selinux_status  Warn    SELinux is in Permissive mode, disabling is recommended
192.168.122.196  selinux_conf    Pass    SELinux is disabled in configuration

Code changes

• Has exported function/method change

Release notes:

`tiup cluster check` now checks the SELinux status in addition to the SELinux configuration

[ti-chi-bot]

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by:
Once this PR has been reviewed and has the lgtm label, please assign xhebox for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Details

Needs approval from an approver in each of these files:

• OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[dveeden]

/retest

[dveeden]

/retest

[ti-chi-bot]

[LGTM Timeline notifier]

Timeline:

• 2025-02-05 02:31:00.589769416 +0000 UTC m=+238932.122181414: ☑️ agreed by breezewish.