21.3. Booleans
SELinux is based on the least level of access required for a service to run. Services can be run in a variety of ways; therefore, you need to specify how you run your services. Use the following Booleans to set up SELinux:
selinuxuser_postgresql_connect_enabled
- Having this Boolean enabled allows any user domain (as defined by PostgreSQL) to make connections to the database server.
Note
Due to the continuous development of the SELinux policy, the list above might not contain all Booleans related to the service at all times. To list them, enter the following command:
Copy to Clipboard
Copied!
Enter the following command to view description of a particular Boolean:
Copy to Clipboard
Copied!
Note that the additional policycoreutils-devel package providing the
getsebool -a | grep service_name
~]$ getsebool -a | grep service_name
sepolicy booleans -b boolean_name
~]$ sepolicy booleans -b boolean_name
sepolicy
utility is required for this command to work.