How to save selinux setsebool configuration

[余水保]

Hi friends,
After change the selinux settings as:
 setsebool httpd_can_network_connect on
It works.   But when reboot,  the setings are lost.   Is there a way to
save the configuration?

[Tristan Santore]

On 02/07/12 13:06, 余水保 wrote:
>  Hi friends,
>  After change the selinux settings as:
>   setsebool httpd_can_network_connect on
>  It works.   But when reboot,  the setings are lost.   Is there a way to
>  save the configuration?
>  
>  
>  
>  
>  --
>  selinux mailing list
>  selinux(a)lists.fedoraproject.org
>  https://admin.fedoraproject.org/mailman/listinfo/selinux 
A simple man setsebool
would have shown you, that the -P argument does that.

Regards,
Tristan

-- 
Tristan Santore BSc MBCS
TS4523-RIPE
Network and Infrastructure Operations
InterNexusConnect
Mobile [phone]
Tristan.Santore(a)internexusconnect.net

Former Thawte Notary
(Please note: Thawte has closed its WoT programme down,
and I am therefore no longer able to accredit trust)

For Fedora related issues, please email me at:
TSantore(a)fedoraproject.org

[余水保]

On Mon, Jul 2, 2012 at 8:08 PM, Tristan Santore <
tristan.santore(a)internexusconnect.net&gt; wrote:

>  On 02/07/12 13:06, 余水保 wrote:
>  > Hi friends,
>  > After change the selinux settings as:
>  >  setsebool httpd_can_network_connect on
>  > It works.   But when reboot,  the setings are lost.   Is there a way to
>  > save the configuration?
>  >
>  >
>  >
>  >
>  > --
>  > selinux mailing list
>  > selinux(a)lists.fedoraproject.org
>  > https://admin.fedoraproject.org/mailman/listinfo/selinux
>  A simple man setsebool would have shown you, that the -P argument does
>  that.
>
>  Regards,
>  Tristan
>
>  --
>  Tristan Santore BSc MBCS
>  TS4523-RIPE
>  Network and Infrastructure Operations
>  InterNexusConnect
>  Mobile [phone]
>  Tristan.Santore(a)internexusconnect.net
>
>  Former Thawte Notary
>  (Please note: Thawte has closed its WoT programme down,
>  and I am therefore no longer able to accredit trust)
>
>  For Fedora related issues, please email me at:
>  TSantore(a)fedoraproject.org
>  --
>  selinux mailing list
>  selinux(a)lists.fedoraproject.org
>  https://admin.fedoraproject.org/mailman/listinfo/selinux 


Thank you, Tristan.   The simple answer surprises me,  and gives me a deep
lesson .  I have tried "man setsebool"  without reading carefully,  because
a misconception leads me  to find separate command to do that.
As years-age MS windows engineer,   this shows that I  am  newbie to linux
core value.

[Miroslav Grepl]

On 07/03/2012 03:15 AM, 余水保 wrote:
>  On Mon, Jul 2, 2012 at 8:08 PM, Tristan Santore 
>  <tristan.santore(a)internexusconnect.net 
>  <mailto:[e-mail]>> wrote:
>
>      On 02/07/12 13:06, 余水保 wrote:
>      > Hi friends,
>      > After change the selinux settings as:
>      >  setsebool httpd_can_network_connect on
>      > It works.   But when reboot,  the setings are lost. Is there a
>      way to
>      > save the configuration?
>      >
>      >
>      >
>      >
>      > --
>      > selinux mailing list
>      > selinux(a)lists.fedoraproject.org
>      <mailto:[e-mail]>
>      > https://admin.fedoraproject.org/mailman/listinfo/selinux
>      A simple man setsebool would have shown you, that the -P argument
>      does that.
>
>      Regards,
>      Tristan
>
>      --
>      Tristan Santore BSc MBCS
>      TS4523-RIPE
>      Network and Infrastructure Operations
>      InterNexusConnect
>      Mobile [phone] <tel:%2B44-78-55069812>
>      Tristan.Santore(a)internexusconnect.net
>      <mailto:[e-mail]>
>
>      Former Thawte Notary
>      (Please note: Thawte has closed its WoT programme down,
>      and I am therefore no longer able to accredit trust)
>
>      For Fedora related issues, please email me at:
>      TSantore(a)fedoraproject.org <mailto:[e-mail]>
>      --
>      selinux mailing list
>      selinux(a)lists.fedoraproject.org
>      <mailto:[e-mail]>
>      https://admin.fedoraproject.org/mailman/listinfo/selinux
>
>
>
>  Thank you, Tristan.   The simple answer surprises me,  and gives me a 
>  deep lesson .  I have tried "man setsebool"  without reading 
>  carefully,  because a misconception leads me  to find separate command 
>  to do that.
>  As years-age MS windows engineer,   this shows that I  am  newbie to 
>  linux core value.
>
>
>
>
>
>  --
>  selinux mailing list
>  selinux(a)lists.fedoraproject.org
>  https://admin.fedoraproject.org/mailman/listinfo/selinux 
How Tristan wrote

-P ... persistent change

So you need

setsebool -P httpd_can_network_connect 1