Redhat: SELINUX Booleans

From Define Wiki
Jump to navigation Jump to search

SELinux Settings

Most SELinux settings are Boolean - they are either on or off. The settings are stored in /selinux/booleans.

As an example of setting is the user_ping setting. When set to 0 users in the user_u role cannot run the ping command.


Check the Boolean Settings

The current status of the Boolean settings can be found using the getsebool command.

List all Booleans

getsebool -a

Setting the Boolean Settings

The status of the Boolean settings can be set using the setsebool command.

setseool allow_user_exec_content off
setseool allow_user_exec_content=0