10.4.5.2. Configuring Booleans

⁠10.4.5.2. Configuring Booleans

Run the setsebool utility in the setsebool boolean_name on/off form to enable or disable Booleans.

The following example demonstrates configuring the httpd_can_network_connect_db Boolean:

Procedure 10.10. Configuring Booleans

By default, the httpd_can_network_connect_db Boolean is off, preventing Apache HTTP Server scripts and modules from connecting to database servers:
```
~]$ getsebool httpd_can_network_connect_db
httpd_can_network_connect_db --> off
```
To temporarily enable Apache HTTP Server scripts and modules to connect to database servers, run the following command as root:
```
~]# setsebool httpd_can_network_connect_db on
```
Use the getsebool utility to verify the Boolean has been enabled:
```
~]$ getsebool httpd_can_network_connect_db
httpd_can_network_connect_db --> on
```
This allows Apache HTTP Server scripts and modules to connect to database servers.
This change is not persistent across reboots. To make changes persistent across reboots, run the setsebool -P boolean-name on command as root: ⁠^[19]
```
~]# setsebool -P httpd_can_network_connect_db on
```

^[19] To temporarily revert to the default behavior, as the Linux root user, run the setsebool httpd_can_network_connect_db off command. For changes that persist across reboots, run the setsebool -P httpd_can_network_connect_db off command.