17.3. Booleans
17.3. Booleans SELinux is based on the least level of access required for a service to run. Services can be run in a variety of ways; therefore, you need to specify how you run your services. Use the following Booleans to set up SELinux: named_write_master_zones When disabled, this Boolean prevents named from writing to zone files or directories labeled with the named_zone_t type. The daemon does not usually need to write to zone files; but in the case that it needs to, or if a secondary server needs to write to zone files, enable this Boolean to allow this action. named_tcp_bind_http_port When enabled, this Boolean allows BIND to bind an Apache port. Note Due to the continuous development of the SELinux policy, the list above might not contain all Booleans related to the service at all times. To list them, enter the following command: Enter the following command to view description of a particular Boolean: Note that the additional policycoreutils-devel package providing the sepolicy utility is required for this command to work.
~]USD getsebool -a | grep service_name ~]USD sepolicy booleans -b boolean_name