In-depth analysis of getsebool command

Introduction

getsebool command is used to query the Boolean values ​​of various rules in the SElinux policy. SELinux policy and rule management related commands: seinfo command, sesearch command, getsebool command, setsebool command, semanage command. Let us explain in detail how to use the getsebool command.

grammar

getsebool [-a] [布尔值条款]

Options

-a：列出目前系统上面的所有布尔值条款设置为开启或关闭值。

Example Query the setting status of all Boolean values ​​in this system:

getsebool -a 
NetworkManager_disable_trans --> off 
allow_console_login --> off 
allow_cvs_read_shadow --> off 
allow_daemons_dump_core --> on 
....(底下省略)....

Check whether httpd_enable_homedirs is closed. If not, please close it:

getsebool httpd_enable_homedirs setsebool -P httpd_enable_homedirs=0 //0是关闭 1是开启

The above is the detailed content of In-depth analysis of getsebool command. For more information, please follow other related articles on the PHP Chinese website!