security_get_boolean_names(3) — Linux manual page


security_get_boolean_names(3)inux API Documentationrity_get_boolean_names(3)

NAME         top

       security_set_boolean,   security_commit_booleans,  security_get_bool‐
       ean_names, security_get_boolean_active,  security_get_boolean_pending
       - routines for manipulating SELinux boolean values

SYNOPSIS         top

       #include <selinux/selinux.h>

       int security_get_boolean_names(char ***names, int *len);

       int security_get_boolean_pending(const char *name);

       int security_get_boolean_active(const char *name);

       int security_set_boolean(const char *name, int value);

       int security_set_boolean_list(size_t boolcnt, SELboolean *boollist,
       int permanent);

       int security_commit_booleans(void);

DESCRIPTION         top

       The SELinux policy can include conditional rules that are enabled or
       disabled based on the current values of a set of policy booleans.
       These policy booleans allow runtime modification of the security
       policy without having to load a new policy.

       The SELinux API allows for a transaction based update. So you can set
       several boolean values and then commit them all at once.

       security_get_boolean_names() provides a list of boolean names,
       currently supported by the loaded policy.

       security_get_boolean_pending() returns the pending value for boolean
       or -1 on failure.

       security_get_boolean_active() returns the active value for boolean or
       -1 on failure.

       security_set_boolean() sets the pending value for boolean

       security_set_boolean_list() saves a list of booleans in a single
       transaction. Note that the int permanent flag is deprecated and
       should be set to zero.

       security_commit_booleans() commits all pending values for the

RETURN VALUE         top

       Where not otherwise stated, functions described in this manual page
       return zero on success or -1 on error.

AUTHOR         top

       This manual page was written by Dan Walsh <>.

SEE ALSO         top

       selinux(8), getsebool(8), booleans(8), togglesebool(8)

COLOPHON         top

       This page is part of the selinux (Security-Enhanced Linux user-space
       libraries and tools) project.  Information about the project can be
       found at ⟨⟩.  If you
       have a bug report for this manual page, see
       ⟨⟩.  This
       page was obtained from the project's upstream Git repository
       ⟨⟩ on 2020-09-18.  (At that
       time, the date of the most recent commit that was found in the repos‐
       itory was 2020-09-17.)  If you discover any rendering problems in
       this HTML version of the page, or you believe there is a better or
       more up-to-date source for the page, or you have corrections or
       improvements to the information in this COLOPHON (which is not part
       of the original manual page), send a mail to             15 November 2004 security_get_boolean_names(3)

Pages that refer to this page: selinux_boolean_sub(3)