Blocking change to permissive

[Bruno Wolff III <bruno@xxxxxxxx>]

I remember that once apon a time there was a boolean (or at least a setting
in system-config-selinux) that would block root from using setenforce to
change from enforcing to permissive mode.

I can't seem to find it now on F17. I haven't figured out the correct
combo to find this via google.

I tested the secure_mode boolean, but that didn't appear to work.
Nothing else in the list looked like it would block changing to
permisive mode.

Is this setting gone now? If not can someone point me to what it is or
documentation about it?

Thanks.
--
selinux mailing list
selinux@xxxxxxxxxxxxxxxxxxxxxxx
https://admin.fedoraproject.org/mailman/listinfo/selinux