Daily tips

How to prevent changing SELinux policy?

#setsebool secure_mode_policyload on

After that the SELinux policy (enforced or permissive) can be changed only after rebooting