On Thu, 8 Apr 2004, Warren Togami wrote:
However permissive has most of the performance overhead, but none of
the
security benefit of enforcing, right? I personally think the user
should choose between off or on, and endure the lengthy process if they
want to transition from off to on.
Another con is that you get a lot of false avc messages, where access
would have already been denied along a specific path in enforcing mode.
- James
--
James Morris
<jmorris(a)redhat.com>