semanage-boolean(8)

πŸ“¦
version 3.11 Β· 2 versions
, in centos-stream 10, centos-stream 9, debian trixie, fedora 43, fedora 44, nixos 26.05, nixpkgs unstable, opensuse-leap 16.0, ubuntu questing, ubuntu resolute, ubuntu stonking

πŸ’– semanage-boolean πŸ’–

okay bestie, so this is the manual page for semanage-boolean β€” the SELinux Policy Management boolean tool ✨ it lives in section 8 of the manual (that's the sysadmin section, iykyk) πŸŽ€


✨ NAME ✨

semanage-boolean β€” SELinux Policy Management boolean tool πŸ¦‹


🌸 SYNOPSIS 🌸

semanage boolean [-h] [-n] [-N] [-S STORE] [ --extract | --deleteall |
--list [-C] | --modify ( --on | --off ) boolean ]

like… that's the whole shape of it, bestie πŸ’…


πŸ’œ DESCRIPTION πŸ’œ

so semanage is the tool you use to configure certain elements of SELinux policy without needing to modify or recompile anything from the policy sources β€” no rebuild arc, no drama, we just change the thing πŸ”₯

and the semanage boolean command specifically? it controls the settings of booleans in SELinux policy. and booleans are literally if-then-else rules written in SELinux Policy πŸ‘‘ they're the little switches that let you customize the way SELinux Policy rules affect a confined domain. very main character energy of them honestly 🫢


πŸŽ€ OPTIONS πŸŽ€

  • -h, --help β€” shows this help message and then dips, exit stage left 😌
  • -n, --noheading β€” don't print the heading when you're listing the specified object type. minimalism, we love her ✨
  • -N, --noreload β€” don't reload policy after commit. like, just leave it 🫣
  • -S STORE, --store STORE β€” pick an alternate SELinux Policy Store to manage. choose your own adventure πŸ’«
  • -C, --locallist β€” list local customizations πŸ“
  • -m, --modify β€” modify a record of the specified object type. glow up time πŸ’…
  • -l, --list β€” list records of the specified object type πŸ‘€
  • -E, --extract β€” extract customizable commands, for use within a transaction 🧚
  • -D, --deleteall β€” remove all local customizations. everything. gone. πŸ’€
  • -1, --on β€” enable the boolean πŸ”›
  • -0, --off β€” disable the boolean πŸ”΄

🌈 EXAMPLE 🌈

turn on the "apache can send mail" boolean β€” this is the persistent version of #setsebool httpd_can_sendmail on πŸ“§

# semanage boolean -m --on httpd_can_sendmail

list customized booleans πŸ“

# semanage boolean -l -C

ate, no crumbs 🍽️✨


πŸ¦‹ SEE ALSO πŸ¦‹

selinux(8), semanage(8), setsebool(8), getsebool(8) β€” go read the girlies too, they're all connected fr fr πŸ’ž


πŸ‘‘ AUTHOR πŸ‘‘

this man page was written by Daniel Walsh <dwalsh@redhat.com> β€” thank you for your service, legend πŸ«‘πŸ’–


and that's the whole thing!! this page comes from semanage-boolean(8), dated 20130617 β€” so it's been out here being iconic since way back, and it still hits πŸ’…βœ¨ bye bestie, go flip some booleans πŸŽ€