setsebool(8)

setsebool8

Set selinux boolean value

Usage

setsebool {[-PNV] boolean value | bool1=val1 bool2=val2 ...}

Overview

setsebool sets the current state of a particular SELinux boolean or a list of booleans to a given value. The value may be 1 or true or on to enable the boolean, or 0 or false or off to disable it.

Without the -P option, only the current boolean value is affected; the boot-time default settings are not changed.

If the -P option is given, all pending values are written to the policy file on disk. So they will be persistent across reboots.

If the -N option is given, the policy on disk is not reloaded into the kernel.

If the -V option is given, verbose error messages will be printed from semanage libraries.

Examples

Enable container_use_devices boolean (will return to persistent value after reboot)
# setsebool container_use_devices 1
Persistently enable samba_create_home_dirs and samba_enable_home_dirs booleans
# setsebool -P samba_create_home_dirs=on samba_enable_home_dirs=on

Releases

11 releases since Debian 3.1 (Sarge); the text changed 5 times.

  1. 3.1
  2. 4.0–6.0
  3. 7
  4. 8
  5. 9–12
  6. 13

Author

This manual page was written by Dan Walsh <[email protected]>. The program was written by Tresys Technology.

From policycoreutils 3.8.1-2 in Debian 13 (Trixie). Parsed by carta from the page's man source.