When trying analyze things that don't work as expected, I sometimes need to disable the dontaudit rules from the policy. There seems to be (at least) two ways to do that: semanage dontaudit off and semodule -DB Is there some difference in the effect of these two commands? Or is it just two ways to do the same thing? -- selinux mailing list selinux@xxxxxxxxxxxxxxxxxxxxxxx https://admin.fedoraproject.org/mailman/listinfo/selinux