selinux fixfiles context

shmuel siegel fedora at shmuelhome.mine.nu
Thu Apr 15 12:58:12 UTC 2004


On Thu, 2004-04-15 at 15:15, Daniel J Walsh wrote:

>   Running in permissive mode is not the same as running in 
> enforcing mode.  I would
> suggest that you run in enforcing mode all the time.  If you run into a 
> problem where something
> will not work in enforcing mode, use setenforce 0 run your command and 
> run setenforce 1.  Then
> grab the AVC messages and submit a bug report.
> 
In my environment, I am a little bit afraid of enforcing mode. I am
running a non-critical mail server on my computer. It wouldn't bother me
if the mail server didn't work but what would be unacceptable is if the
server accepted mail and then couldn't write it to permanent storage. Is
there anything that I can do to assure that I don't give false positives
to received mail?





More information about the fedora-test-list mailing list