Forward looking to FC2 final and SELinux

Jeremy Katz katzj at redhat.com
Thu Apr 8 22:05:44 UTC 2004


On Thu, 2004-04-08 at 17:48, Alexandre Oliva wrote:
> On Apr  8, 2004, Jesse Keating <jkeating at j2solutions.net> wrote:
> > What more do we gain by having permissive on instead of SELinux 
> > completely off?
> 
> file contexts are set correctly to some extent (aren't they?), so
> switching to enforcing mode would be a shorter, not longer path.

To some extent.  The problem is that without domain transitions, things
get mislabeled and you're in a case where you really might as well not
have anything labeled at all IMHO

Jeremy





More information about the fedora-devel-list mailing list