How can I find detailed information on what an SELinux boolean actually allows?

Solution Verified - Updated -

Issue

To prevent Linux users in the staff_t domain from executing applications in their home directories and /tmp/: 
~]# setsebool -P allow_staff_exec_content off
  • This doesn't provide specifics about what types are affected by this configuration.

Environment

  • Red Hat Enterprise Linux 6
  • selinux-policy

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.

Current Customers and Partners

Log in for full access

Log In

New to Red Hat?

Learn more about Red Hat subscriptions

Using a Red Hat product through a public cloud?

How to access this content