LOAD_POLICY(8) NSA LOAD_POLICY(8)NAME
load_policy - load a new SELinux policy into the kernel
SYNOPSIS
load_policy [-qi]
DESCRIPTION
load_policy loads the installed policy file into the kernel. The existing policy boolean values are automatically preserved across policy
reloads rather than being reset to the default values in the policy file.
OPTIONS -q suppress warning messages.
-i inital policy load. Only use this if this is the first time policy is being loaded since boot (usually called from initramfs).
EXIT STATUS
0 Success
1 Invalid option
2 Policy load failed
3 Initial policy load failed and enforcing mode requested
SEE ALSO
booleans (8),
AUTHORS
This manual page was written by Dan Walsh <dwalsh@redhat.com>.
The program was written by Stephen Smalley <sds@epoch.ncsc.mil>.
Security Enhanced Linux May 2003 LOAD_POLICY(8)
Check Out this Related Man Page
booleans(8) SELinux Command Line documentation booleans(8)NAME
booleans - Policy booleans enable runtime customization of SELinux policy.
DESCRIPTION
This manual page describes SELinux policy booleans.
The SELinux policy can include conditional rules that are enabled or disabled based on the current values of a set of policy booleans.
These policy booleans allow runtime modification of the security policy without having to load a new policy.
For example, the boolean httpd_enable_cgi allows the httpd daemon to run cgi scripts if it is enabled. If the administrator does not want
to allow execution of cgi scripts, he can simply disable this boolean value.
The policy defines a default value for each boolean, typically false. These default values can be overridden via local settings created
via the setsebool(8) utility, using -P to make the setting persistent across reboots. The system-config-securitylevel tool provides a
graphical interface for altering the settings. The load_policy(8) program will preserve current boolean settings upon a policy reload by
default, or can optionally reset booleans to the boot-time defaults via the -b option.
Boolean values can be listed by using the getsebool(8) utility and passing it the -a option.
Boolean values can also be changed at runtime via the setsebool(8) utility or the togglesebool utility. By default, these utilities only
change the current boolean value and do not affect the persistent settings, unless the -P option is used to setsebool.
AUTHOR
This manual page was written by Dan Walsh <dwalsh@redhat.com>. The SELinux conditional policy support was developed by Tresys Technology.
SEE ALSO getsebool(8), setsebool(8), selinux(8), togglesebool(8)dwalsh@redhat.com 11 Aug 2004 booleans(8)