NAME

       booleans - Policy booleans enable runtime customization of SELinux policy

DESCRIPTION

       This  manual  page  describes SELinux policy booleans.   The SELinux policy can include conditional rules
       that are enabled or disabled based on the current values of a  set  of  policy  booleans.   These  policy
       booleans allow runtime modification of the security policy without having to load a new policy.

       For  example,  the  boolean httpd_enable_cgi allows the httpd daemon to run cgi scripts if it is enabled.
       If the administrator does not want to allow execution of cgi scripts, he can simply disable this  boolean
       value.

       The  policy  defines  a  default  value  for  each boolean, typically false.  These default values can be
       overridden via local settings created via  the  setsebool(8)  utility,  using  -P  to  make  the  setting
       persistent  across  reboots.   The  system-config-securitylevel  tool  provides a graphical interface for
       altering the settings.  The load_policy(8) program will preserve current boolean settings upon  a  policy
       reload by default, or can optionally reset booleans to the boot-time defaults via the -b option.

       Boolean values can be listed by using the getsebool(8) utility and passing it the -a option.

       Boolean  values  can  also  be  changed  at  runtime  via the setsebool(8) utility or the togglesebool(8)
       utility.  By default, these utilities only change the  current  boolean  value  and  do  not  affect  the
       persistent settings, unless the -P option is used to setsebool.

AUTHOR

       This  manual  page  was written by Dan Walsh <dwalsh@redhat.com>.  The SELinux conditional policy support
       was developed by Tresys Technology.

SEE ALSO

       getsebool(8), setsebool(8), selinux(8), togglesebool(8)