The
setsebool is used to set SELinux boolean value i.e. various configurations can
be enabled or disabled using this tool. In other words, the setsebool command
switches on and off the protection of SELinux. Type getsebool -a to see all
such options which can be enabled or disabled at run time:
e.g.
# getsebool -a
The following should give you a complete listing of all the vsftpd switches:
e.g.
e.g.
# getsebool -a | grep ftp
For example, if httpd_disable_trans
set to 1, it will disable SELinux protection for Apache web server. To
disable it, enter:
# setsebool -P httpd_can_network_connect=1
To enable it, enter:
# setsebool -P httpd_can_network_connect=0
what -P in setsebool command stands for
ReplyDeletei think -P flag in setsebool stands for 'persistant'. correct me if i am wrong,,,
ReplyDeleteyou are right P stands for persistant means changes will reflect even after system restart.
Delete