getsebool(8) SELinux Command Line documentation getsebool(8)

# [NAME](#NAME)

getsebool - get SELinux boolean value(s)

# [SYNOPSIS](#SYNOPSIS)

**getsebool** \[**-a**] \[*boolean*]

# [DESCRIPTION](#DESCRIPTION)

**getsebool** reports whether a particular SELinux boolean, or all SELinux booleans, are on or off. In certain situations a boolean can be in one state with a pending change to the other state. getsebool will report this as a pending change. The pending value indicates the value that will be applied upon the next boolean commit.

The setting of boolean values occurs in two stages; first the pending value is changed, then the booleans are committed, causing their active values to become their pending values. This allows a group of booleans to be changed in a single transaction, by setting all of their pending values as desired and then committing once.

# [OPTIONS](#OPTIONS)

[**-a**](#a)

Show all SELinux booleans.

# [EXAMPLE](#EXAMPLE)

```
Show current state of httpd_can_connect_ftp
# getsebool httpd_can_connect_ftp
```

# [AUTHOR](#AUTHOR)

This manual page was written by Dan Walsh <dwalsh@redhat.com>. The program was written by Tresys Technology.

# [SEE ALSO](#SEE_ALSO)

[**selinux**(8)](/man/os/libselinux/selinux.8), [**setsebool**(8)](/man/os/libselinux/setsebool.8), [**booleans**(8)](/man/os/libselinux/booleans.8)

11 Aug 2004 dwalsh@redhat.com

---

Document: getsebool(8) from libselinux 3.11-r2 (Chainguard OS)
Source: https://github.com/SELinuxProject/selinux.git