selinux-policy/refpolicy/policy/global_booleans

19 lines
584 B
Plaintext
Raw Normal View History

#
# This file is for the declaration of global booleans.
# To change the default value at build time, the booleans.conf
# file should be used.
#
## Enabling secure mode disallows programs, such as
## newrole, from transitioning to administrative
## user domains.
gen_bool(secure_mode,false)
## Disable transitions to insmod.
gen_bool(secure_mode_insmod,false)
## boolean to determine whether the system permits loading policy, setting
## enforcing mode, and changing boolean values. Set this to true and you
## have to reboot to set it back
gen_bool(secure_mode_policyload,false)