Mastering Linux Security and Hardening

Viewing the Booleans

Booleans are part of what makes up an SELinux policy, and each Boolean represents a binary choice. In SELinux policies, a Boolean either allows something or it prohibits something. To see all of the Booleans on your system, run the getsebool -a command. (It's a long list, so I'll only show partial output here.):

[donnie@localhost ~]$ getsebool -aabrt_anon_write --> offabrt_handle_event --> offabrt_upload_watch_anon_write --> onantivirus_can_scan_system --> offantivirus_use_jit --> offauditadm_exec_content --> on. . .. . .xserver_object_manager --> offzabbix_can_network --> offzarafa_setrlimit --> offzebra_write_config --> offzoneminder_anon_write --> offzoneminder_run_sudo --> off[donnie@localhost ~]$

To view more than ...