> Why is it even possible to disable SELinux at runtime? If you're able to overwrite arbitrary kernel memory you can just replace the SELinux code with code th

> Why is it even possible to disable SELinux at runtime? If you're able to overwrite arbitrary kernel memory you can just replace the SELinux code with code that says you can do anything. The idea is to make it more difficult to take advantage of kernel bugs such that you can modify arbitrary kernel state.