I'm guilty of the same, and in fact our corporate AMI has selinux disabled. Not my choice, though I'm at least complicit in that I've not protested. Vendor supp

I'm guilty of the same, and in fact our corporate AMI has selinux disabled. Not my choice, though I'm at least complicit in that I've not protested. Vendor supported apps are the biggest issue. If we have any issues, selinux is the culprit until it's disabled. Even, after ruling it out, you can forget about vendor supported RCA if you turn selinux back on.