On Thu, 20 Dec 2001, Noah silva wrote:

> I would think that having it in development mode then could be somewhat of
> a security hazard in itself. (if an attacker were somehow able to run the
> avc_toggle program). I assume it is recommended to turn off the
> development mode for production systems after developing the policies on a
> test system.

This is also discussed in step 19 of the README and in the help text for the option. RTM!

--
Stephen D. Smalley, NAI Labs
ssmalley@nai.com




--
You have received this message because you are subscribed to the selinux list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.