Blame policy/global_booleans
|
Chris PeBenito |
4f9f30c |
#
|
|
Chris PeBenito |
4f9f30c |
# This file is for the declaration of global booleans.
|
|
Chris PeBenito |
4f9f30c |
# To change the default value at build time, the booleans.conf
|
|
Chris PeBenito |
4f9f30c |
# file should be used.
|
|
Chris PeBenito |
4f9f30c |
#
|
|
Chris PeBenito |
4f9f30c |
|
|
Chris PeBenito |
885b83e |
## <desc>
|
|
Chris PeBenito |
885b83e |
##
|
|
Chris PeBenito |
4f9f30c |
## Enabling secure mode disallows programs, such as
|
|
Chris PeBenito |
4f9f30c |
## newrole, from transitioning to administrative
|
|
Chris PeBenito |
4f9f30c |
## user domains.
|
|
Chris PeBenito |
885b83e |
##
|
|
Chris PeBenito |
885b83e |
## </desc>
|
|
Chris PeBenito |
4f9f30c |
gen_bool(secure_mode,false)
|
|
Chris PeBenito |
8967bf8 |
|
|
Chris PeBenito |
885b83e |
## <desc>
|
|
Chris PeBenito |
885b83e |
##
|
|
Chris PeBenito |
8967bf8 |
## Disable transitions to insmod.
|
|
Chris PeBenito |
885b83e |
##
|
|
Chris PeBenito |
885b83e |
## </desc>
|
|
Chris PeBenito |
8967bf8 |
gen_bool(secure_mode_insmod,false)
|
|
Chris PeBenito |
8967bf8 |
|
|
Chris PeBenito |
885b83e |
## <desc>
|
|
Chris PeBenito |
885b83e |
##
|
|
Chris PeBenito |
8967bf8 |
## boolean to determine whether the system permits loading policy, setting
|
|
Chris PeBenito |
8967bf8 |
## enforcing mode, and changing boolean values. Set this to true and you
|
|
Chris PeBenito |
8967bf8 |
## have to reboot to set it back
|
|
Chris PeBenito |
885b83e |
##
|
|
Chris PeBenito |
885b83e |
## </desc>
|
|
Chris PeBenito |
8967bf8 |
gen_bool(secure_mode_policyload,false)
|