2
# This file is for the declaration of global booleans.
3
# To change the default value at build time, the booleans.conf
9
## Enabling secure mode disallows programs, such as
10
## newrole, from transitioning to administrative
14
gen_bool(secure_mode,false)
18
## Disable transitions to insmod.
21
gen_bool(secure_mode_insmod,false)
25
## boolean to determine whether the system permits loading policy, setting
26
## enforcing mode, and changing boolean values. Set this to true and you
27
## have to reboot to set it back
30
gen_bool(secure_mode_policyload,false)