SELinux

To better understand it please imagine:
Permissive Mode as a Intrusion Detection System (IDS) where
Enforcing Mode could be considered a Intrusion Prevention System (IPS).