Which command permanently sets an SELinux boolean value?

• A. setsebool httpd_read_user_content 1
• B. setsebool -P httpd_read_user_content 1
• C. setsebool -P httpd_read_user_content true
• D. setsebool -P httpd_read_user_content on

Answer: (B)

Setting a SELinux boolean permanently requires using the -P option with setsebool. The -P flag writes the change to the persistent policy store so it survives reboots, whereas omitting -P applies only to the current runtime session.

Using a numeric 1 enables the boolean and is a valid way to set it. Therefore the command that uses -P to persist the change, with a value that enables the boolean, is the correct approach. Even though other persistent forms like -P with on or true can also work, the option shown here that matches the expected persistent behavior is the one with -P and 1.