Henry Zhang wrote: > Why does Fedora select SELINUXTYPE=target? As I remember it, when first tried, the strict policy was attempted. However, it blocked too much. Normal usages stopped working, and to explicitly allow them all would take too much. Instead, the targeted policy was chosen with the intention it should protect against the dangerous threats, while still allowing normal operation. https://www.fedoraproject.org/wiki/SELinux/Policies _______________________________________________ selinux mailing list -- selinux@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to selinux-leave@xxxxxxxxxxxxxxxxxxxxxxx Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/selinux@xxxxxxxxxxxxxxxxxxxxxxx Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue