Thread: Explain SELinux setsebool and getsebool commands

I want to know the clear function of "setsebool" & "getsebool" with semanage in a very easy & understandable language.

Please help ASAP.

Kindly provide me some good documentation for SELinux.

The setsebool is used to set SELinux boolean value i.e. various configurtions can be enabled or disabled using this tool. In other words, the setsebool command switches on and off the protection of Selinux. Type getsebool -a to see all such options which can be enabled or disabled at run time:

Code:

getsebool -a

For example, if httpd_disable_trans set to 1, it will disable SELinux protection for Apache web server. To disable it, enter:

Code:

setsebool httpd_disable_trans 1

To enable it, enter:

Code:

setsebool httpd_disable_trans 0

The following should give you a pretty complete listing of all the samba switches:

Code:

getsebool -a | grep "*samba*"