documentation_complete: true


title: 'Enable the postgresql_selinux_unconfined_dbadm SELinux Boolean'

description: |-
    By default, the SELinux boolean <tt>postgresql_selinux_unconfined_dbadm</tt> is enabled.
    If this setting is disabled, it should be enabled as it allows Database Administrators to
    execute Data Manipulation Language (DML) statements.
    {{{ describe_sebool_enable(sebool="postgresql_selinux_unconfined_dbadm") }}}

rationale: ""

severity: medium

{{{ complete_ocil_entry_sebool_enabled(sebool="postgresql_selinux_unconfined_dbadm") }}}

template:
    name: sebool
    vars:
        seboolid: postgresql_selinux_unconfined_dbadm
