f6c7a7be36
Policy booleans allow adjusting certain policy rules at runtime (including whether changing policy booleans is allowed). The new option allows setting their defaults at build time. A monolithic policy (like built by package/refpolicy) does not support persistent changes to policy booleans, so changing the defaults is required to make changes across boots. Adjusting policy/booleans.conf after "make conf" is intended for that purpose [1, 2]. [1] https://github.com/SELinuxProject/refpolicy/pull/355#issuecomment-792758725 [2] https://github.com/SELinuxProject/refpolicy/blob/4d97523c71603b12e92cf1b80cd0e01ac75bc067/README#L186-L191 Signed-off-by: Fiona Klute <fiona.klute@gmx.de> Signed-off-by: Julien Olivain <ju.o@free.fr>