You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
59 lines
1.8 KiB
59 lines
1.8 KiB
4 months ago
|
.TH "booleans" "8" "11 Aug 2004" "dwalsh@redhat.com" "SELinux Command Line documentation"
|
||
|
|
.SH "NAME"
|
||
|
|
booleans \- Policy booleans enable runtime customization of SELinux policy
|
||
|
|
.
|
||
|
|
.SH "DESCRIPTION"
|
||
|
|
This manual page describes SELinux policy booleans.
|
||
|
|
.BR
|
||
|
|
The SELinux policy can include conditional rules that are enabled or
|
||
|
|
disabled based on the current values of a set of policy booleans.
|
||
|
|
These policy booleans allow runtime modification of the security
|
||
|
|
policy without having to load a new policy.
|
||
|
|
|
||
|
|
For example, the boolean httpd_enable_cgi allows the httpd daemon to
|
||
|
|
run cgi scripts if it is enabled. If the administrator does not want
|
||
|
|
to allow execution of cgi scripts, he can simply disable this boolean
|
||
|
|
value.
|
||
|
|
|
||
|
|
The policy defines a default value for each boolean, typically false.
|
||
|
|
These default values can be overridden via local settings created via the
|
||
|
|
.BR setsebool (8)
|
||
|
|
utility, using
|
||
|
|
.B \-P
|
||
|
|
to make the setting persistent across reboots. The
|
||
|
|
.B system\-config\-securitylevel
|
||
|
|
tool provides a graphical interface for altering
|
||
|
|
the settings. The
|
||
|
|
.BR load_policy (8)
|
||
|
|
program will preserve
|
||
|
|
current boolean settings upon a policy reload by default, or can
|
||
|
|
optionally reset booleans to the boot-time defaults via the
|
||
|
|
.B \-b
|
||
|
|
option.
|
||
|
|
|
||
|
|
Boolean values can be listed by using the
|
||
|
|
.BR getsebool (8)
|
||
|
|
utility and passing it the
|
||
|
|
.B \-a
|
||
|
|
option.
|
||
|
|
|
||
|
|
Boolean values can also be changed at runtime via the
|
||
|
|
.BR setsebool (8)
|
||
|
|
utility or the
|
||
|
|
.BR togglesebool (8)
|
||
|
|
utility. By default, these utilities only change the
|
||
|
|
current boolean value and do not affect the persistent settings,
|
||
|
|
unless the
|
||
|
|
.B \-P
|
||
|
|
option is used to setsebool.
|
||
|
|
.
|
||
|
|
.SH AUTHOR
|
||
|
|
This manual page was written by Dan Walsh <dwalsh@redhat.com>.
|
||
|
|
The SELinux conditional policy support was developed by Tresys Technology.
|
||
|
|
.
|
||
|
|
.SH "SEE ALSO"
|
||
|
|
.BR getsebool (8),
|
||
|
|
.BR setsebool (8),
|
||
|
|
.BR selinux (8),
|
||
|
|
.BR togglesebool (8)
|