Is there any way to tell from the audit log or elsewhere when someone/something changed SELinux from enforcing to permissive or vice versa? -- fedora-selinux-list mailing list fedora-selinux-list@xxxxxxxxxx https://www.redhat.com/mailman/listinfo/fedora-selinux-list