Red Hat Bugzilla – Bug 188387
The man page for "booleans" does not reflect reality in FC5.
Last modified: 2007-11-30 17:11:30 EST
Description of problem:
The following output of "man booleans" is incorrect as far as I can tell:
These default values can be overridden at boot-time based on the set-
tings in the /etc/selinux/SELINUXTYPE/booleans file, where SELINUXTYPE
is the type of policy currently being run on the system as defined in
the /etc/selinux/config file. The system-config-securitylevel tool
provides an interface for altering the settings in this file.
There is no file named /etc/selinux/SELINUXTYPE/booleans on my fc5 systems.
And you can't use system-config-securitylevel from a shell prompt in a terminal
window to edit selinux settings. (Which I reported as a separate bug, assuming
that it is supposed to allow that.)
Version-Release number of selected component (if applicable):
Steps to Reproduce:
1. man booleans
The man page also omits saying that setsebool -P can be used to set booleans
persistantly (accross reboots).
Fixed in 1.30.1-2 in rawhide.
Next time I update FC5 with the tool chain I will put this fix in it.