/usr/share/selinux/ubuntu/include/global_booleans.xml is in selinux-policy-ubuntu-dev 0.2.20091117-0ubuntu2.
This file is owned by root:root, with mode 0o644.
The actual contents of the file can be viewed below.
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 | <bool name="secure_mode" dftval="false">
<desc>
<p>
Enabling secure mode disallows programs, such as
newrole, from transitioning to administrative
user domains.
</p>
</desc>
</bool>
<bool name="secure_mode_insmod" dftval="false">
<desc>
<p>
Disable transitions to insmod.
</p>
</desc>
</bool>
<bool name="secure_mode_policyload" dftval="false">
<desc>
<p>
boolean to determine whether the system permits loading policy, setting
enforcing mode, and changing boolean values. Set this to true and you
have to reboot to set it back
</p>
</desc>
</bool>
|