setsebool - set SELinux boolean value
Contents
Description
setsebool sets the current state of a particular SELinux boolean or a list of booleans to a given value.
The value may be 1 or true or on to enable the boolean, or 0 or false or off to disable it.
Without the -P option, only the current boolean value is affected; the boot-time default settings are not
changed.
If the -P option is given, all pending values are written to the policy file on disk. So they will be
persistent across reboots.
If the -N option is given, the policy on disk is not reloaded into the kernel.
If the -V option is given, verbose error messages will be printed from semanage libraries.
Example
Enable container_use_devices boolean (will return to persistent value after reboot)
# setsebool container_use_devices 1
Persistently enable samba_create_home_dirs and samba_enable_home_dirs booleans
# setsebool -P samba_create_home_dirs=on samba_enable_home_dirs=on
Name
setsebool - set SELinux boolean value
See Also
getsebool(8), booleans(8), togglesebool(8), semanage(8) dwalsh@redhat.com 11 Aug 2004 setsebool(8)
Synopsis
setsebool[-PNV]booleanvalue|bool1=val1bool2=val2...
