diff --git a/libsemanage/man/man5/semanage.conf.5 b/libsemanage/man/man5/semanage.conf.5 index 8efc7dd5..7d6f2fef 100644 --- a/libsemanage/man/man5/semanage.conf.5 +++ b/libsemanage/man/man5/semanage.conf.5 @@ -95,8 +95,8 @@ to this option set to "false"). .TP .B handle-unknown -This option controls the kernel behavior for handling permissions defined in the kernel but missing from the actual policy. -It can be set to "deny", "reject" or "allow". +This option overrides the kernel behavior for handling permissions defined in the kernel but missing from the actual policy. +It can be set to "deny", "reject" or "allow". By default the setting from the policy is taken. .TP .B bzip-blocksize