selinux-policy/policy/global_booleans

#
# This file is for the declaration of global booleans.
# To change the default value at build time, the booleans.conf
# file should be used.
#

ifdef(`strict_policy',`
## <desc>
## <p>
## Enabling secure mode disallows programs, such as
## newrole, from transitioning to administrative
## user domains.
## </p>
## </desc>
gen_bool(secure_mode,false)
')

## <desc>
## <p>
## Disable transitions to insmod.
## </p>
## </desc>
gen_bool(secure_mode_insmod,false)

## <desc>
## <p>
## boolean to determine whether the system permits loading policy, setting
## enforcing mode, and changing boolean values.  Set this to true and you
## have to reboot to set it back
## </p>
## </desc>
gen_bool(secure_mode_policyload,false)
* Updated to sedoctool to read bool files and tunable files separately. * Changed the xml tag of <boolean> to <bool> to be consistent with gen_bool(). * Modified the implementation of segenxml to use regular expressions. 2005-10-07 18:08:50 +00:00			`#`
			`# This file is for the declaration of global booleans.`
			`# To change the default value at build time, the booleans.conf`
			`# file should be used.`
			`#`

patch from dan Wed, 26 Jul 2006 14:42:46 -0400 2006-07-28 15:13:58 +00:00			ifdef(`strict_policy',`
xml building changes, add desc tag to booleans, add summary tag to bools 2006-02-10 18:41:53 +00:00			`## <desc>`
			`## <p>`
* Updated to sedoctool to read bool files and tunable files separately. * Changed the xml tag of <boolean> to <bool> to be consistent with gen_bool(). * Modified the implementation of segenxml to use regular expressions. 2005-10-07 18:08:50 +00:00			`## Enabling secure mode disallows programs, such as`
			`## newrole, from transitioning to administrative`
			`## user domains.`
xml building changes, add desc tag to booleans, add summary tag to bools 2006-02-10 18:41:53 +00:00			`## </p>`
			`## </desc>`
* Updated to sedoctool to read bool files and tunable files separately. * Changed the xml tag of <boolean> to <bool> to be consistent with gen_bool(). * Modified the implementation of segenxml to use regular expressions. 2005-10-07 18:08:50 +00:00			`gen_bool(secure_mode,false)`
patch from dan Wed, 26 Jul 2006 14:42:46 -0400 2006-07-28 15:13:58 +00:00			`')`
merge in some of dan's old policy changes 2005-11-07 20:09:28 +00:00
xml building changes, add desc tag to booleans, add summary tag to bools 2006-02-10 18:41:53 +00:00			`## <desc>`
			`## <p>`
merge in some of dan's old policy changes 2005-11-07 20:09:28 +00:00			`## Disable transitions to insmod.`
xml building changes, add desc tag to booleans, add summary tag to bools 2006-02-10 18:41:53 +00:00			`## </p>`
			`## </desc>`
merge in some of dan's old policy changes 2005-11-07 20:09:28 +00:00			`gen_bool(secure_mode_insmod,false)`

xml building changes, add desc tag to booleans, add summary tag to bools 2006-02-10 18:41:53 +00:00			`## <desc>`
			`## <p>`
merge in some of dan's old policy changes 2005-11-07 20:09:28 +00:00			`## boolean to determine whether the system permits loading policy, setting`
			`## enforcing mode, and changing boolean values. Set this to true and you`
			`## have to reboot to set it back`
xml building changes, add desc tag to booleans, add summary tag to bools 2006-02-10 18:41:53 +00:00			`## </p>`
			`## </desc>`
merge in some of dan's old policy changes 2005-11-07 20:09:28 +00:00			`gen_bool(secure_mode_policyload,false)`