An administrator can disable it complete with "setenforce 0" and restore it with "setenforce 1" if necessary. The rules can also be adjusted, and there are a n

An administrator can disable it complete with "setenforce 0" and restore it with "setenforce 1" if necessary. The rules can also be adjusted, and there are a number of tunable parameters. The intent is that it is never disabled.