| Dan Walsh | 1925e1e | 2013-10-11 08:34:44 -0400 | [diff] [blame] | 1 | .TH "semanage-boolean" "8" "20130617" "" "" |
| 2 | .SH "NAME" |
| Laurent Bigonville | 2e93833 | 2013-11-06 13:24:01 +0100 | [diff] [blame] | 3 | semanage\-boolean \- SELinux Policy Management boolean tool |
| Dan Walsh | 1925e1e | 2013-10-11 08:34:44 -0400 | [diff] [blame] | 4 | .SH "SYNOPSIS" |
| Petr Lautrbach | 03e87ff | 2016-06-29 14:05:42 +0200 | [diff] [blame] | 5 | .B semanage boolean [\-h] [\-n] [\-N] [\-S STORE] [ \-\-extract | \-\-deleteall | \-\-list [\-C] | \-\-modify ( \-\-on | \-\-off ) boolean ] |
| Dan Walsh | 1925e1e | 2013-10-11 08:34:44 -0400 | [diff] [blame] | 6 | |
| 7 | .SH "DESCRIPTION" |
| 8 | semanage is used to configure certain elements of |
| 9 | SELinux policy without requiring modification to or recompilation |
| 10 | from policy sources. semanage boolean command controls the settings of booleans in SELinux policy. booleans are if\-then\-else rules written in SELinux Policy. They can be used to customize the way that SELinux Policy rules effect a confined domain. |
| 11 | .SH "OPTIONS" |
| 12 | .TP |
| 13 | .I \-h, \-\-help |
| 14 | show this help message and exit |
| 15 | .TP |
| 16 | .I \-n, \-\-noheading |
| 17 | Do not print heading when listing the specified object type |
| 18 | .TP |
| 19 | .I \-N, \-\-noreload |
| 20 | Do not reload policy after commit |
| 21 | .TP |
| 22 | .I \-S STORE, \-\-store STORE |
| 23 | Select an alternate SELinux Policy Store to manage |
| 24 | .TP |
| 25 | .I \-C, \-\-locallist |
| 26 | List local customizations |
| 27 | .TP |
| 28 | .I \-m, \-\-modify |
| 29 | Modify a record of the specified object type |
| 30 | .TP |
| 31 | .I \-l, \-\-list |
| 32 | List records of the specified object type |
| 33 | .TP |
| 34 | .I \-E, \-\-extract |
| 35 | Extract customizable commands, for use within a transaction |
| 36 | .TP |
| 37 | .I \-D, \-\-deleteall |
| 38 | Remove all local customizations |
| 39 | .TP |
| 40 | .I \-1, \-\-on |
| 41 | Enable the boolean |
| 42 | .TP |
| 43 | .I \-0, \-\-off |
| 44 | Disable the boolean |
| 45 | |
| 46 | .SH EXAMPLE |
| 47 | .nf |
| Petr Lautrbach | f46b64f | 2019-04-04 23:16:52 +0200 | [diff] [blame] | 48 | Turn on the apache can send mail boolean |
| Dan Walsh | 1925e1e | 2013-10-11 08:34:44 -0400 | [diff] [blame] | 49 | # semanage boolean \-m \-\-on httpd_can_sendmail |
| 50 | |
| 51 | List customized booleans |
| 52 | # semanage boolean \-l \-C |
| 53 | |
| 54 | .SH "SEE ALSO" |
| Alan Jenkins | 62f0589 | 2017-01-11 12:41:09 +0000 | [diff] [blame] | 55 | .BR selinux (8), |
| 56 | .BR semanage (8), |
| 57 | .BR setsebool (8), |
| 58 | .BR getsebool (8) |
| Dan Walsh | 1925e1e | 2013-10-11 08:34:44 -0400 | [diff] [blame] | 59 | |
| 60 | .SH "AUTHOR" |
| 61 | This man page was written by Daniel Walsh <dwalsh@redhat.com> |