Status: IN
The safe procedure to re-enable SELinux is: disabled → permissive (reboot) → check denials → `fixfiles -F onboot` → enforcing (reboot).
Source: repo:entries/2026/03/04/en-documentation-red_hat_enterprise_linux-9-html-using_selinux-changing-selinux-.md