# # This file is for the declaration of global booleans. # To change the default value at build time, the booleans.conf # file should be used. # ifdef(`strict_policy',` ## ##

## Enabling secure mode disallows programs, such as ## newrole, from transitioning to administrative ## user domains. ##

##
gen_bool(secure_mode,false) ') ## ##

## Disable transitions to insmod. ##

##
gen_bool(secure_mode_insmod,false) ## ##

## boolean to determine whether the system permits loading policy, setting ## enforcing mode, and changing boolean values. Set this to true and you ## have to reboot to set it back ##

##
gen_bool(secure_mode_policyload,false)