booleans(8) SELinux Command Line documentation booleans(8) NAME booleans - Policy booleans enable runtime customization of SELinux pol- icy. DESCRIPTION This manual page describes SELinux policy booleans. The SELinux policy can include conditional rules that are enabled or disabled based on the current values of a set(7,n,1 builtins) of policy booleans. These policy booleans allow runtime modification of the security policy without having to load(7,n) a new policy. For example, the boolean httpd_enable_cgi allows the httpd daemon to run cgi scripts if(3,n) it is enabled. If the administrator does not want to allow execution of cgi scripts, he can simply disable this boolean value. The policy defines a default value for each boolean, typically false. These default values can be overridden at boot-time based on the set- tings in(1,8) the /etc/selinux/SELINUXTYPE/booleans file(1,n), where SELINUXTYPE is the type of policy currently being run on the system as defined in(1,8) the /etc/selinux/config(1,5) file. The system-config-securitylevel tool provides an interface for altering the settings in(1,8) this file. The load_policy(8) program will preserve current boolean settings upon a policy reload by default, or can optionally reset(1,7,1 tput) booleans to the boot- time(1,2,n) defaults via the -b option. Boolean values can be listed by using the getsebool(8) utility and passing it the -a option. Boolean values can also be changed at runtime via the setsebool(8) utility or the togglesebool utility. These utilities only change the current boolean value and do not affect the boot-time settings. AUTHOR This manual page was written by Dan Walsh <dwalsh@redhat.com>. The SELinux conditional policy support was developed by Tresys Technology. SEE ALSO getsebool(8), setsebool(8), selinux(8), togglesebool(8) FILES /etc/selinux/SELINUXTYPE/booleans, /etc/selinux/config(1,5) dwalsh@redhat.com 11 Aug 2004 booleans(8)