Re: fedup and selinux

[EGO-II.1]

I have learned MORE about SELinux just being on this mailing list than 
from ANY other source out there!....thanks to all for your responses to 
this....(this will only help me in my pursuit of RHCE certification!..)

EGO II

On 12/24/2013 04:24 PM, Rahul Sundaram wrote:
> Hi
>
> On Tue, Dec 24, 2013 at 1:52 PM, Rick Stevens wrote:
> I don't have examples at hand, but I have seen FTP-related stuff, some
> upgrades and some other network-related things fail when SELinux is in
> permissive mode and work just fine when it's disabled.
>
>
> The default SELinux policy in Fedora is fairly relaxed anyway since it 
> has to work out of the box for most users but once it it goes into 
> permissive mode, any enforcement must be treated as a bug and 
> reported.   The goal of permissive model is to purely log policy 
> issues.   Permissive domains in SELinux mean an entirely different 
> thing however and shouldn''t be confused with permissive mode.
>
> Rahul