security_load_booleans(3) — Linux manual page


security_get_boolean_names(3)ux API Documentationty_get_boolean_names(3)

NAME         top

       security_set_boolean, security_commit_booleans,
       security_get_boolean_names, security_get_boolean_active,
       security_get_boolean_pending - routines for manipulating SELinux
       boolean values

SYNOPSIS         top

       #include <selinux/selinux.h>

       int security_get_boolean_names(char ***names, int *len);

       int security_get_boolean_pending(const char *name);

       int security_get_boolean_active(const char *name);

       int security_set_boolean(const char *name, int value);

       int security_set_boolean_list(size_t boolcnt, SELboolean
       *boollist, int permanent);

       int security_commit_booleans(void);

DESCRIPTION         top

       The SELinux policy can include conditional rules that are enabled
       or disabled based on the current values of a set of policy
       booleans.  These policy booleans allow runtime modification of
       the security policy without having to load a new policy.

       The SELinux API allows for a transaction based update. So you can
       set several boolean values and then commit them all at once.

       security_get_boolean_names() provides a list of boolean names,
       currently supported by the loaded policy.

       security_get_boolean_pending() returns the pending value for
       boolean or -1 on failure.

       security_get_boolean_active() returns the active value for
       boolean or -1 on failure.

       security_set_boolean() sets the pending value for boolean

       security_set_boolean_list() saves a list of booleans in a single
       transaction. Note that the int permanent flag is deprecated and
       should be set to zero.

       security_commit_booleans() commits all pending values for the

RETURN VALUE         top

       Where not otherwise stated, functions described in this manual
       page return zero on success or -1 on error.

AUTHOR         top

       This manual page was written by Dan Walsh <>.

SEE ALSO         top

       selinux(8), getsebool(8), booleans(8), togglesebool(8)

COLOPHON         top

       This page is part of the selinux (Security-Enhanced Linux user-
       space libraries and tools) project.  Information about the
       project can be found at 
       ⟨⟩.  If you have a
       bug report for this manual page, see
       This page was obtained from the project's upstream Git repository
       ⟨⟩ on 2022-12-17.  (At
       that time, the date of the most recent commit that was found in
       the repository was 2022-12-16.)  If you discover any rendering
       problems in this HTML version of the page, or you believe there
       is a better or more up-to-date source for the page, or you have
       corrections or improvements to the information in this COLOPHON
       (which is not part of the original manual page), send a mail to           15 November 2004security_get_boolean_names(3)

Pages that refer to this page: selinux_boolean_sub(3)