getsebool(8)

getsebool(8) 💖

okay bestie, welcome to the SELinux Command Line documentation — this is the little cutie that tells you whether your SELinux booleans are on or off 🎀

---

✨ NAME ✨

getsebool — get SELinux boolean value(s) 🦋

---

🌸 SYNOPSIS 🌸

getsebool [-a] [boolean]

---

💅 DESCRIPTION 💅

So getsebool reports whether a particular SELinux boolean — or all SELinux booleans — are on or off. simple as that, no cap ✨

But here's the tea: in certain situations a boolean can be in one state with a pending change to the other state. getsebool will report this as a pending change. the pending value indicates the value that will be applied upon the next boolean commit. 👑

And why does that matter? because the setting of boolean values happens in two stages, bestie:

1. first the pending value is changed
2. then the booleans are committed, causing their active values to become their pending values

This lets a whole group of booleans be changed in a single transaction — you set all of their pending values as you want them, and then you commit once. it's giving coordinated group-chat energy fr fr 💅

---

🎀 OPTIONS 🎀

• -a — Show all SELinux booleans. every single one, no gatekeeping 👑

---

🌈 EXAMPLE 🌈

Show current state of httpd_can_connect_ftp:

# getsebool httpd_can_connect_ftp

---

💜 AUTHOR 💜

This manual page was written by Dan Walsh <dwalsh@redhat.com>. The program was written by Tresys Technology. iconic of them honestly 🫶

---

⭐ SEE ALSO ⭐

selinux(8), setsebool(8), booleans(8)

go read those too bestie, iykyk 📚✨

---

ok so that's the whole page!! now go forth and vibe check your booleans 🦋💖

dwalsh@redhat.com — 11 Aug 2004 — getsebool(8) 🌸 mwah, thanks for reading, ily, periodt 💅✨