Forward looking to FC2 final and SELinux

[James Morris]

On Thu, 8 Apr 2004, Warren Togami wrote:

> However permissive has most of the performance overhead, but none of the 
> security benefit of enforcing, right?  I personally think the user 
> should choose between off or on, and endure the lengthy process if they 
> want to transition from off to on.

Another con is that you get a lot of false avc messages, where access
would have already been denied along a specific path in enforcing mode.



- James
-- 
James Morris 
<jmorris at redhat.com>