SELINUX

Bruno Wolff III bruno at wolff.to
Mon Aug 30 16:39:47 UTC 2010


On Mon, Aug 30, 2010 at 12:43:39 +0000,
  JB <jb.1234abcd at gmail.com> wrote:
> 
> So, permissive mode is only useful for policy development.
> If you do not, you may as well disable selinux.
> JB

Permissive mode keeps files properly labelled. If you ever use disabled mode,
you need to do a relabel if you go back to permissive or enforcing.
You really want permissive unless you know you plan to use disabled for
the foreseeable future.


More information about the users mailing list