Global booleans:

secure_mode
Default value

false

Description

Enabling secure mode disallows programs, such as newrole, from transitioning to administrative user domains.

secure_mode_insmod
Default value

false

Description

Disable transitions to insmod.

secure_mode_policyload
Default value

false

Description

boolean to determine whether the system permits loading policy, setting enforcing mode, and changing boolean values. Set this to true and you have to reboot to set it back