The story behind by default permissive domains

Daniel J Walsh dwalsh at redhat.com
Tue Nov 24 22:51:43 UTC 2009


On 11/24/2009 03:56 PM, Göran Uddeborg wrote:
> Daniel J Walsh:
>> Our thoughts on permissive domains was when we introduce a new
>> domain during a release, we will run it permissive until the end of
>> a release.
> 
> Makes sense.  So then I'll report issues like these as usual when I
> find them.  (After having upgraded to the F12 version of applications,
> of course.)
Yes that is the goal to gather as many AVC messages as possible to make it feasible to remove permissive in F13.




More information about the fedora-selinux-list mailing list