Hey everyone, what do you guys think about this? https://github.com/facebook/osquery/pull/4224 (WIP: Add a new audit-based table to collect SELinux events)