LinuxCommandLibrary

setsebool

Set SELinux boolean value.

TLDR

Show the current setting of [a]ll booleans

$ getsebool -a
copy


Set or unset a boolean temporarily (non-persistent across reboot)
$ sudo setsebool [httpd_can_network_connect] [1|true|on|0|false|off]
copy


Set or unset a boolean [p]ersistently
$ sudo setsebool -P [container_use_devices] [1|true|on|0|false|off]
copy


Set or unset multiple booleans [p]ersistently at once
$ sudo setsebool -P [ftpd_use_fusefs=1 mount_anyfile=0 ...]
copy


Set or unset a boolean persistently (alternative method using semanage-boolean)
$ sudo semanage boolean [-m|--modify] [-1|--on|-0|--off] [haproxy_connect_any]
copy

Copied to clipboard