booleans(5)                 SELinux configuration                booleans(5)

NAME         top

       booleans - The SELinux booleans configuration files

DESCRIPTION         top

       The booleans file, if present contains booleans to support a specific
       distribution.

       The booleans.local file, if present contains locally generated
       booleans.

       Both files contain a list of boolean names and their associated
       values.

       Generally the booleans and/or booleans.local files are not present
       (they have been deprecated). However if there is an SELinux-aware
       application that uses the libselinux functions listed below, then
       these files may be present:

              security_set_boolean_list(3)
                     Writes a booleans.local file if flag permanent = 1.

              security_load_booleans(3)
                     Looks for a booleans and/or booleans.local file at
                     selinux_booleans_path(3) unless a specific path is
                     specified as a parameter.

       booleans(8) has details on booleans and setsebool(8) describes how
       booleans can now be set persistent across reboots.

       selinux_booleans_path(3) will return the active policy path to these
       files. The default boolean files are:
              /etc/selinux/{SELINUXTYPE}/booleans
              /etc/selinux/{SELINUXTYPE}/booleans.local

       Where {SELINUXTYPE} is the entry from the selinux configuration file
       config (see selinux_config(5)).

FILE FORMAT         top

       Both boolean files have the same format and contain one or more
       boolean names and their value.

       The format is:
              boolean_name value

       Where:
              boolean_name
                     The name of the boolean.
              value
                     The default setting for the boolean. This can be one of
                     the following:
                            true | false | 1 | 0

       Note that if SETLOCALDEFS is set in the SELinux config file (see
       selinux_config(5)), then selinux_mkload_policy(3) will check for a
       booleans.local file in the selinux_booleans_path(3) and also a
       local.users file (see local.users(5)) in the selinux_users_path(3).

SEE ALSO         top

       selinux(8), booleans(8), setsebool(8), semanage(8),
       selinux_booleans_path(3), security_set_boolean_list(3),
       security_load_booleans(3), selinux_mkload_policy(3),
       selinux_users_path(3), selinux_config(5), local.users(5)

COLOPHON         top

       This page is part of the selinux (Security-Enhanced Linux user-space
       libraries and tools) project.  Information about the project can be
       found at ⟨https://github.com/SELinuxProject/selinux/wiki⟩.  If you
       have a bug report for this manual page, see
       ⟨https://github.com/SELinuxProject/selinux/wiki/Contributing⟩.  This
       page was obtained from the project's upstream Git repository
       ⟨https://github.com/SELinuxProject/selinux⟩ on 2018-02-02.  (At that
       time, the date of the most recent commit that was found in the repos‐
       itory was 2018-01-25.)  If you discover any rendering problems in
       this HTML version of the page, or you believe there is a better or
       more up-to-date source for the page, or you have corrections or
       improvements to the information in this COLOPHON (which is not part
       of the original manual page), send a mail to man-pages@man7.org

Security Enhanced Linux          28-Nov-2011                     booleans(5)

Pages that refer to this page: selinux_config(5)

HTML rendering created 2018-02-02 by Michael Kerrisk, author of The Linux Programming Interface, maintainer of the Linux man-pages project. For details of in-depth Linux/UNIX system programming training courses that I teach, look here. Hosting by jambit GmbH.