setenforce, {get,set}sebool, semanage-{boolean,port,permissive}: add page (#12834)

Co-authored-by: spageektti <git@spageektti.cc>
This commit is contained in:
cyqsimon
2024-05-27 02:28:37 +08:00
committed by GitHub
parent c476e22061
commit 1c4f439791
8 changed files with 110 additions and 0 deletions

25
pages/linux/setsebool.md Normal file
View File

@@ -0,0 +1,25 @@
# setsebool
> Set SELinux boolean value.
> See also: `semanage-boolean`, `getsebool`.
> More information: <https://manned.org/man/setsebool>.
- Show the current setting of [a]ll booleans:
`getsebool -a`
- Set or unset a boolean temporarily (non-persistent across reboot):
`sudo setsebool {{httpd_can_network_connect}} {{1|true|on|0|false|off}}`
- Set or unset a boolean [p]ersistently:
`sudo setsebool -P {{container_use_devices}} {{1|true|on|0|false|off}}`
- Set or unset multiple booleans [p]ersistently at once:
`sudo setsebool -P {{ftpd_use_fusefs=1 mount_anyfile=0 ...}}`
- Set or unset a boolean persistently (alternative method using `semanage-boolean`):
`sudo semanage boolean {{-m|--modify}} {{-1|--on|-0|--off}} {{haproxy_connect_any}}`