On Fri, Sep 21, 2007 at 10:13:39 +0530, Rahul Sundaram <sundaram@xxxxxxxxxxxxxxxxx> wrote: > Tim wrote: > >On Thu, 2007-09-20 at 21:31 +0530, Rahul Sundaram wrote: > >>It shouldn't cause any trouble if you set to permissive mode. > > > >In the past "permissive" mode still got in the way of some things, and > >wasn't just the same as disabled but logging what would have happened. > >Has that changed? > > It is not the same as disabled. Permissive shouldn't block anything > however but only log what the denials are. IIRC I have seen some > exceptions to this but if any end users are running into such issues, > more details would be good to know. Notably if you disable SELinux, files will no longer be properly labelled when they are created. So that if you later try to turn it back on, you will need to do a complete relabel.
