2024 Update Rollup 1

Configuration BooleansPermanent link for this heading

The Fabasoft Folio SELinux policy provides the following Booleans that can be changed to modify policy rules without actually changing the policy itself:

  • bool allow_fsc_smbd_userdata_access (default: false)
    Grants read/write access for MMC areas to the Samba daemon. By default, no domain outside of Fabasoft Folio can access data in MMC areas.
  • bool fsc_coomk_can_network_connect_coost_db (default: false)
    Grants direct connections from the Fabasoft Folio Kernel to the COO service database (its configured port as defined by fsc_coost_db_port_t). By default, access is disabled.
  • bool fsc_coomk_can_network_connect_http (default: false)
    Grants connections from the Fabasoft Folio Kernel to HTTP servers (their configured port as defined by http_port_t). By default, access is disabled.
  • bool fsc_coomk_can_network_connect_http_cache (default: false)
    Grants connections from the Fabasoft Folio Kernel to HTTP servers (their configured port as defined by http_cache_port_t). By default, access is disabled.
  • bool fsc_coomk_can_network_connect_smtp (default: false)
    Grants connections from the Fabasoft Folio Kernel to SMTP servers (their configured port as defined by smtp_port_t). By default, access is disabled.
  • bool fsc_can_network_connect_amqp (default: false)
    Grants connections from the Fabasoft Folio Kernel and the COO service to advanced message queuing protocol (AMQP) ports (as defined by the port type amqp_port_t). By default, access is disabled.