On Thu, 8 Apr 2004, Warren Togami wrote: > However permissive has most of the performance overhead, but none of the > security benefit of enforcing, right? I personally think the user > should choose between off or on, and endure the lengthy process if they > want to transition from off to on. Another con is that you get a lot of false avc messages, where access would have already been denied along a specific path in enforcing mode. - James -- James Morris <jmorris@xxxxxxxxxx>
