Oh yeah, _that_ fscker.
The engine that is so overengineered that even proper introductions start with "a security context is made up of these three things, of which we will never use the second and third". (The improper introduction is of course "setenforce permissive".)
I've never ever seen a tool that was so firmly "unless you are big enough to have two people doing these things full-time, don't bother".
Biting the hand that feeds IT
