Powered By Blogger

Sunday, 23 September 2012

SELinux setsebool and getsebool commands

                    The setsebool is used to set SELinux boolean value i.e. various configurtions can be enabled or disabled using this tool. In other words, the setsebool command switches on and off the protection of Selinux. Type getsebool -a to see all such options which can be enabled or disabled at run time:

Code:
getsebool -a
For example, if httpd_disable_trans set to 1, it will disable SELinux protection for Apache web server. To disable it, enter:
Code:
setsebool httpd_disable_trans 1
To enable it, enter:
Code:
setsebool httpd_disable_trans 0
The following should give you a pretty complete listing of all the samba switches:
Code:
getsebool -a | grep "*samba*"

1 comment: