genpolbools(8)

✨ genpolbools(8) ✨

okay so bestie, welcome to genpolbools, part of the SELinux Command Line documentation 💅 this is section 8, so it's a sysadmin-y system tool, and no cap it's a lil niche but it's so useful.

---

🎀 NAME 🎀

genpolbools — rewrite a binary policy with different boolean settings 🦋

literally what it says on the tin. you got a policy, you got opinions about booleans, you get a new policy. iconic.

---

🌸 SYNOPSIS 🌸

genpolbools oldpolicy booleans newpolicy

three lil arguments, that's the whole vibe. old in, new out, booleans doing the deciding in the middle 🫶

---

💖 DESCRIPTION 💖

so here's the tea, bestie: genpolbools takes an existing binary policy and rewrites it with different boolean settings, and out the other side comes a new binary policy. like a glow-up but for policy files ✨

the booleans file is where you spill what you want changed. it's built out of name=value lines — one per line, name first, value after the =. and the value? it's giving binary choices only:

• <green>0</green> or <green>false</green> → disable that boolean 🙈
• <green>1</green> or <green>true</green> → enable that boolean 👑

that's it. that's the whole menu. no in-between, no "kinda", no "it's complicated" — booleans are booleans fr fr 💀

ngl this is a rewrite, so keep your oldpolicy safe and let the new one land in newpolicy — don't go overwriting your original on purpose unless you're really sure, bestie 😭

---

and that's the page!! 🎀 this lil legend was written by stephen.smalley.work@gmail.com, dated 11 August 2004 — yes, 2004, it's been serving this whole time and it's still lowkey iconic 👑 mwah, go rewrite some policies 💜