LC3 — disable keeps rows and stops enforcement; re-enable does not clobber (2.5/2.6). Tighten one rule, disable (rows survive, the Deny stops binding), re-enable (no rows added, the Deny survived and binds again).
LC3 — disable keeps rows and stops enforcement; re-enable does not clobber (2.5/2.6). Tighten one rule, disable (rows survive, the Deny stops binding), re-enable (no rows added, the Deny survived and binds again).