Show Table of Contents
28.3. Booleans
SELinux is based on the least level of access required for a service to run. Services can be run in a variety of ways; therefore, you need to specify how you run your services. Use the following Booleans to set up SELinux:
gluster_export_all_ro- Having this Boolean enabled allows
glusterfsdto share files and directory as read-only. This Boolean is disabled by default. gluster_export_all_rw- Having this Boolean enabled allows
glusterfsdto share files and directories with read and write access. This Boolean is enabled by default. gluster_anon_write- Having this Boolean enabled allows
glusterfsdto modify public files labeled with thepublic_content_rw_tSELinux type.
Note
Due to the continuous development of the SELinux policy, the list above might not contain all Booleans related to the service at all times. To list them, enter the following command:
~]$ getsebool -a | grep service_name
Enter the following command to view description of a particular Boolean:
~]$ sepolicy booleans -b boolean_name
Note that the additional policycoreutils-devel package providing the sepolicy utility is required for this command to work.
Where did the comment section go?
Red Hat's documentation publication system recently went through an upgrade to enable speedier, more mobile-friendly content. We decided to re-evaluate our commenting platform to ensure that it meets your expectations and serves as an optimal feedback mechanism. During this redesign, we invite your input on providing feedback on Red Hat documentation via the discussion platform.