1semanage-boolean(8) semanage-boolean(8)
2
3
4
6 semanage-boolean - SELinux Policy Management boolean tool
7
9 semanage boolean [-h] [-n] [-N] [-S STORE] [ --extract | --deleteall |
10 --list [-C] | --modify ( --on | --off ) boolean ]
11
12
14 semanage is used to configure certain elements of SELinux policy with‐
15 out requiring modification to or recompilation from policy sources.
16 semanage boolean command controls the settings of booleans in SELinux
17 policy. Booleans are if-then-else rules written in SELinux Policy. They
18 can be used to customize the way that SELinux Policy rules effect a
19 confined domain.
20
21
23 -h, --help
24 Show this help message and exit
25
26 -n, --noheading
27 Do not print heading when listing the specified object type
28
29 -N, --noreload
30 Do not reload policy after commit
31
32 -S STORE, --store STORE
33 Select an alternate SELinux Policy Store to manage
34
35 -C, --locallist
36 List local customizations
37
38 -m, --modify
39 Modify a record of the specified object type
40
41 -l, --list
42 List records of the specified object type
43
44 -E, --extract
45 Extract customizable commands, for use within a transaction
46
47 -D, --deleteall
48 Remove all local customizations
49
50 -1, --on
51 Enable the boolean
52
53 -0, --off
54 Disable the boolean
55
56
58 Turn on the "apache can send mail" boolean (persistent version of #setsebool httpd_can_sendmail on)
59 # semanage boolean -m --on httpd_can_sendmail
60
61 List customized booleans
62 # semanage boolean -l -C
63
64
66 selinux(8), semanage(8), setsebool(8), getsebool(8)
67
68
70 This man page was written by Daniel Walsh <dwalsh@redhat.com>
71
72
73
74 20130617 semanage-boolean(8)