Mastering Linux Security and Hardening - Second Edition

Viewing Booleans

Booleans are part of what makes up an SELinux policy, and each Boolean represents a binary choice. In SELinux policies, a Boolean either allows something or it prohibits something. To see all Booleans on your system, run the getsebool -a command. (It's a long list, so I'll only show partial output here.):

[donnie@localhost ~]$ getsebool -aabrt_anon_write --> offabrt_handle_event --> offabrt_upload_watch_anon_write --> onantivirus_can_scan_system --> offantivirus_use_jit --> offauditadm_exec_content --> on. . .. . .zarafa_setrlimit --> offzebra_write_config --> offzoneminder_anon_write --> offzoneminder_run_sudo --> off[donnie@localhost ~]$

To view more than one Boolean, the -a switch is mandatory. If you just happen to know ...