seboolean – Toggles SELinux booleans — Ansible Documentation

- AnsibleFest
- Products
- Community
- Webinars & Training
- Blog

Documentation

# seboolean – Toggles SELinux booleans

- Synopsis
- Requirements
- Parameters
- Notes
- Examples
- Status

## Synopsis

- Toggles SELinux booleans.

## Requirements

The below requirements are needed on the host that executes this module.

- libselinux-python
- libsemanage-python

## Parameters

Parameter | Choices/Defaults | Comments
--- | --- | ---
ignore_selinux_state boolean added in 2.8 | Choices: no ← yes | Useful for scenarios (chrooted environment) that you can't get the real SELinux state.
name - / required |  | Name of the boolean to configure.
persistent boolean | Choices: no ← yes | Set to `yes` if the boolean setting should survive a reboot.
state boolean / required | Choices: no yes | Desired boolean value

## Notes

Note

- Not tested on any Debian based system.

## Examples

    - name: Set httpd_can_network_connect flag on and keep it persistent across reboots
      seboolean:
        name: httpd_can_network_connect
        state: yes
        persistent: yes

## Status

- This module is guaranteed to have backward compatible interface changes going forward. [stableinterface]
- This module is maintained by the Ansible Core Team. [core]

### Red Hat Support

More information about Red Hat’s support of this module is available from this Red Hat Knowledge Base article.

### Authors

- Stephen Fromm (@sfromm)

Hint

If you notice any issues in this documentation, you can edit this document to improve it.