Display non-default SELinux booleans?

Hi,

On my various RHEL 7 clones (CentOS, Oracle Linux) I have a nifty /etc/selinux/targeted/modules/active/booleans.local file that contains the complete list of all the SELinux booleans that I have altered.

I just took a peek in one of my Rocky Linux 8 servers, and weirdly enough that file doesn’t exist. For what it’s worth, even the /etc/selinux/targeted/modules directory doesn’t exist, though I’m sure I have altered some booleans to make things work.

Now how can I found out which booleans I have altered ?

Any suggestions ?

Hi, maybe:

/var/lib/selinux/targeted/active/modules

This exists for me on RL8. Maybe they are here?

# semanage export 
1 Like

Thanks. That did the trick.