Description of problem: The following output of "man booleans" is incorrect as far as I can tell: These default values can be overridden at boot-time based on the set- tings in the /etc/selinux/SELINUXTYPE/booleans file, where SELINUXTYPE is the type of policy currently being run on the system as defined in the /etc/selinux/config file. The system-config-securitylevel tool provides an interface for altering the settings in this file. There is no file named /etc/selinux/SELINUXTYPE/booleans on my fc5 systems. And you can't use system-config-securitylevel from a shell prompt in a terminal window to edit selinux settings. (Which I reported as a separate bug, assuming that it is supposed to allow that.) Version-Release number of selected component (if applicable): How reproducible: Steps to Reproduce: 1. man booleans 2. 3. Actual results: Expected results: Additional info:
The man page also omits saying that setsebool -P can be used to set booleans persistantly (accross reboots).
Fixed in 1.30.1-2 in rawhide. Next time I update FC5 with the tool chain I will put this fix in it.