semanage-boolean(8)
π semanage-boolean π
okay bestie, so this is the manual page for semanage-boolean β the SELinux Policy Management boolean tool β¨ it lives in section 8 of the manual (that's the sysadmin section, iykyk) π
β¨ NAME β¨
semanage-boolean β SELinux Policy Management boolean tool π¦
πΈ SYNOPSIS πΈ
semanage boolean [-h] [-n] [-N] [-S STORE] [ --extract | --deleteall |
--list [-C] | --modify ( --on | --off ) boolean ]
likeβ¦ that's the whole shape of it, bestie π
π DESCRIPTION π
so semanage is the tool you use to configure certain elements of SELinux policy without needing to modify or recompile anything from the policy sources β no rebuild arc, no drama, we just change the thing π₯
and the semanage boolean command specifically? it controls the settings of booleans in SELinux policy. and booleans are literally if-then-else rules written in SELinux Policy π they're the little switches that let you customize the way SELinux Policy rules affect a confined domain. very main character energy of them honestly π«Ά
π OPTIONS π
-h,--helpβ shows this help message and then dips, exit stage left π-n,--noheadingβ don't print the heading when you're listing the specified object type. minimalism, we love her β¨-N,--noreloadβ don't reload policy after commit. like, just leave it π«£-S STORE,--store STOREβ pick an alternate SELinux Policy Store to manage. choose your own adventure π«-C,--locallistβ list local customizations π-m,--modifyβ modify a record of the specified object type. glow up time π-l,--listβ list records of the specified object type π-E,--extractβ extract customizable commands, for use within a transaction π§-D,--deleteallβ remove all local customizations. everything. gone. π-1,--onβ enable the boolean π-0,--offβ disable the boolean π΄
π EXAMPLE π
turn on the "apache can send mail" boolean β this is the persistent version of #setsebool httpd_can_sendmail on π§
# semanage boolean -m --on httpd_can_sendmail
list customized booleans π
# semanage boolean -l -C
ate, no crumbs π½οΈβ¨
π¦ SEE ALSO π¦
selinux(8), semanage(8), setsebool(8), getsebool(8) β go read the girlies too, they're all connected fr fr π
π AUTHOR π
this man page was written by Daniel Walsh <dwalsh@redhat.com> β thank you for your service, legend π«‘π
and that's the whole thing!! this page comes from semanage-boolean(8), dated 20130617 β so it's been out here being iconic since way back, and it still hits π
β¨ bye bestie, go flip some booleans π
π¦ where this page comes from
- centos-stream 10: policycoreutils-python-utils 3.10-2.el10 Β· GPL-2.0-or-later
- centos-stream 10: policycoreutils-python-utils 3.11-1.el10 Β· GPL-2.0-or-later
- centos-stream 9: policycoreutils-python-utils 3.6-7.el9 Β· GPL-2.0-or-later
- centos-stream 9: policycoreutils-python-utils 3.6-9.el9 Β· GPL-2.0-or-later
- debian trixie: policycoreutils-python-utils 3.8.1-2 Β· GPL-2.0-or-later
- fedora 43: policycoreutils-python-utils 3.9-5.fc43 Β· GPL-2.0-or-later
- fedora 43: policycoreutils-python-utils 3.9-7.fc43 Β· GPL-2.0-or-later
- fedora 44: policycoreutils-python-utils 3.10-1.fc44 Β· GPL-2.0-or-later
- fedora 44: policycoreutils-python-utils 3.11-2.fc44 Β· GPL-2.0-or-later
- nixos 26.05: selinux-python 3.10
- nixpkgs unstable: selinux-python 3.10
- opensuse-leap 16.0: policycoreutils-python-utils 3.8.1-160000.5.1 Β· GPL-2.0-or-later
- ubuntu questing: policycoreutils-python-utils 3.8.1-2
- ubuntu resolute: policycoreutils-python-utils 3.9-2 Β· GPL-2.0-or-later
- ubuntu stonking: policycoreutils-python-utils 3.11-2 Β· GPL-2.0-or-later
- π girlified by deepseek-ai/DeepSeek-V4.1-Flash on : a language model's rewrite of the original, under its terms