Jeremy Katz a écrit :
We ensure that contexts are all set correctly at the end with a restorecon. The biggest "problem" with being in enforcing mode vs permissive is you can get a flood of AVCs
I am not sure I get this: do you mean a flood of AVCs on the build host _while_ setting all contexts at the end with restorecon? I never noticed something like this.
SELinux being disabled only works if your live image config has SELinux disabled
Sounds reasonable enough. -- Fedora-livecd-list mailing list Fedora-livecd-list@redhat.com https://www.redhat.com/mailman/listinfo/fedora-livecd-list