#
# This file is for the declaration of global booleans.
# To change the default value at build time, the booleans.conf
# file should be used.
#

## Enabling secure mode disallows programs, such as
## newrole, from transitioning to administrative
## user domains.
gen_bool(secure_mode,false)

## Disable transitions to insmod.
gen_bool(secure_mode_insmod,false)

## boolean to determine whether the system permits loading policy, setting
## enforcing mode, and changing boolean values.  Set this to true and you
## have to reboot to set it back
gen_bool(secure_mode_policyload,false)