<tt><font size=2>> From: "Jóhann B. Guðmundsson" <johannbg@gmail.com></font></tt>
<br><tt><font size=2>> To: test@lists.fedoraproject.org</font></tt>
<br><tt><font size=2>> Date: 09/24/2012 16:25</font></tt>
<br><tt><font size=2>> Subject: Re: Selinux in development releases</font></tt>
<br><tt><font size=2>> Sent by: test-bounces@lists.fedoraproject.org</font></tt>
<br><tt><font size=2>> <br>
> On 09/24/2012 08:16 PM, drago01 wrote:<br>
> > On Mon, Sep 24, 2012 at 10:13 PM, "Jóhann B. Guðmundsson"<br>
> > <johannbg@gmail.com> wrote:<br>
> >> I hereby propose that we default selinux to permissive mode
up to final<br>
> >> which should just get rid of unneeded nuance during testing.<br>
> > -1<br>
> ><br>
> > This would just mean we test something different then we actually<br>
> > ship. If there are selinux bugs they are supposed to be cough
during<br>
> > testing and reported like any other bugs.<br>
> <br>
> With permissive mode we should still be able to catch all those errors
<br>
> and report them without all the downside that comes with having it
in <br>
> enforcing mode during our development releases...</font></tt>
<br>
<br><tt><font size=2>Not true from what I've witnessed. There are
certain rules that indeed block some action, but do not get logged. I've
encountered several over the years and was only able to detect these by
toggling enforcing/permissive. I do wish there was some master switch
to temporarily enable logging for them.</font></tt>
<br>
<br><tt><font size=2>I concur that Dan is superhuman in his response times.</font></tt>
<br><font size=2 face="sans-serif"><br>
--<br>
John Florian</font>
<br>