15.3. Booleans
SELinux is based on the least level of access required for a service to run. Services can be run in a variety of ways; therefore, you need to specify how you run your services. Use the following Booleans to set up SELinux:
gluster_export_all_ro
- Having this Boolean enabled allows
glusterfsd
to share files and directory as read-only. This Boolean is disabled by default. gluster_export_all_rw
- Having this Boolean enabled allows
glusterfsd
to share files and directories with read and write access. This Boolean is enabled by default. gluster_anon_write
- Having this Boolean enabled allows
glusterfsd
to modify public files labeled with thepublic_content_rw_t
SELinux type.
Note
Due to the continuous development of the SELinux policy, the list above might not contain all Booleans related to the service at all times. To list them, run the following command as root:
~]# semanage boolean -l | grep service_name