1booleans(5)                  SELinux configuration                 booleans(5)
2
3
4

NAME

6       booleans - The SELinux booleans configuration files
7

DESCRIPTION

9       The  booleans  file, if present contains booleans to support a specific
10       distribution.
11
12       The booleans.local file, if present contains  locally  generated  bool‐
13       eans.
14
15       Both files contain a list of boolean names and their associated values.
16
17       Generally  the  booleans  and/or  booleans.local  files are not present
18       (they have been deprecated).  However  if  there  is  an  SELinux-aware
19       application that uses the libselinux functions listed below, then these
20       files may be present:
21
22              security_set_boolean_list(3)
23                     Writes a booleans.local file if flag permanent = 1.
24
25              security_load_booleans(3)
26                     Looks  for  a  booleans  and/or  booleans.local  file  at
27                     selinux_booleans_path(3) unless a specific path is speci‐
28                     fied as a parameter.
29
30       booleans(8) has details on  booleans  and  setsebool(8)  describes  how
31       booleans can now be set persistent across reboots.
32
33       selinux_booleans_path(3)  will  return  the active policy path to these
34       files. The default boolean files are:
35              /etc/selinux/{SELINUXTYPE}/booleans
36              /etc/selinux/{SELINUXTYPE}/booleans.local
37
38       Where {SELINUXTYPE} is the entry from the  selinux  configuration  file
39       config (see selinux_config(5)).
40

FILE FORMAT

42       Both boolean files have the same format and contain one or more boolean
43       names and their value.
44
45       The format is:
46              boolean_name value
47
48       Where:
49              boolean_name
50                     The name of the boolean.
51              value
52                     The default setting for the boolean. This can be  one  of
53                     the following:
54                            true | false | 1 | 0
55
56       Note  that  if  SETLOCALDEFS  is  set  in  the SELinux config file (see
57       selinux_config(5)), then  selinux_mkload_policy(3)  will  check  for  a
58       booleans.local   file   in  the  selinux_booleans_path(3)  and  also  a
59       local.users file (see local.users(5)) in the selinux_users_path(3).
60

SEE ALSO

62       selinux(8), booleans(8), setsebool(8), semanage(8),
63       selinux_booleans_path(3), security_set_boolean_list(3),
64       security_load_booleans(3), selinux_mkload_policy(3),
65       selinux_users_path(3), selinux_config(5), local.users(5)
66
67
68
69Security Enhanced Linux           28-Nov-2011                      booleans(5)
Impressum