We have a strange issue showing up in our system. We are trying to modify a configuration file - we are unable to in enforcing mode but are able to in permissive mode. There are no denials seen.

We have run semodule –DB, to get to the hidden denials, but to no avail.

Could you give us some pointers on how to get to the bottom of this?

Thanks,

Radha.