getsebool(8)

getsebool8

Get selinux boolean value(s)

Usage

getsebool [-a] [boolean]

Overview

getsebool reports whether a particular SELinux boolean, or all SELinux booleans, are on or off. In certain situations a boolean can be in one state with a pending change to the other state. getsebool will report this as a pending change. The pending value indicates the value that will be applied upon the next boolean commit.

The setting of boolean values occurs in two stages; first the pending value is changed, then the booleans are committed, causing their active values to become their pending values. This allows a group of booleans to be changed in a single transaction, by setting all of their pending values as desired and then committing once.

Options

-a

Show all SELinux booleans.

Examples

Show current state of httpd_can_connect_ftp
# getsebool httpd_can_connect_ftp

Releases

11 releases since Debian 3.1 (Sarge); the text changed 5 times.

  1. 3.1
  2. 4.0
  3. 5.0–7
  4. 8
  5. 9–12
  6. 13

Author

This manual page was written by Dan Walsh <[email protected]>. The program was written by Tresys Technology.

From selinux-utils 3.8.1-1 in Debian 13 (Trixie). Parsed by carta from the page's man source.