[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]

Re: Forward looking to FC2 final and SELinux



On Thu, 8 Apr 2004, Warren Togami wrote:

> However permissive has most of the performance overhead, but none of the 
> security benefit of enforcing, right?  I personally think the user 
> should choose between off or on, and endure the lengthy process if they 
> want to transition from off to on.

Another con is that you get a lot of false avc messages, where access
would have already been denied along a specific path in enforcing mode.



- James
-- 
James Morris 
<jmorris redhat com>




[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]