On Thu, 2004-04-08 at 17:48, Alexandre Oliva wrote: > On Apr 8, 2004, Jesse Keating <jkeating@xxxxxxxxxxxxxxx> wrote: > > What more do we gain by having permissive on instead of SELinux > > completely off? > > file contexts are set correctly to some extent (aren't they?), so > switching to enforcing mode would be a shorter, not longer path. To some extent. The problem is that without domain transitions, things get mislabeled and you're in a case where you really might as well not have anything labeled at all IMHO Jeremy