Alexandre Oliva wrote:
On Apr 8, 2004, Jesse Keating <jkeating(a)j2solutions.net>
wrote:
>What more do we gain by having permissive on instead of SELinux
>completely off?
file contexts are set correctly to some extent (aren't they?), so
switching to enforcing mode would be a shorter, not longer path.
However permissive has most of the performance overhead, but none of the
security benefit of enforcing, right? I personally think the user
should choose between off or on, and endure the lengthy process if they
want to transition from off to on.
Warren