Hi
On Tue, Dec 24, 2013 at 1:52 PM, Rick Stevens wrote:
The default SELinux policy in Fedora is fairly relaxed anyway since it has to work out of the box for most users but once it it goes into permissive mode, any enforcement must be treated as a bug and reported. The goal of permissive model is to purely log policy issues. Permissive domains in SELinux mean an entirely different thing however and shouldn''t be confused with permissive mode.
I don't have examples at hand, but I have seen FTP-related stuff, some
upgrades and some other network-related things fail when SELinux is in
permissive mode and work just fine when it's disabled.
The default SELinux policy in Fedora is fairly relaxed anyway since it has to work out of the box for most users but once it it goes into permissive mode, any enforcement must be treated as a bug and reported. The goal of permissive model is to purely log policy issues. Permissive domains in SELinux mean an entirely different thing however and shouldn''t be confused with permissive mode.
Rahul
-- users mailing list users@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe or change subscription options: https://admin.fedoraproject.org/mailman/listinfo/users Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines Have a question? Ask away: http://ask.fedoraproject.org
