---
title: Install with SELinux Enabled
slug: install-10x/install-with-selinux-enabled
docTags: 
createdAt: 2025-07-16T13:29:40.590Z
---

:::hint{type="info"}
 Some integrations may require additional SELinux configuration to be done by the system administrator in order to work.
:::

By default, the installer requires that SELinux is disabled before continuing. If you need to leave SELinux enabled you can add a flag (under the selinuxConfig spec) to the installer-override.yaml patch file `spec:` section.

For example:

:::BlockQuote
apiVersion: cluster.kurl.sh/v1beta1
kind: Installer
metadata:
  name: "patch"
spec:
  selinuxConfig:
    selinux: "enforcing"
    preserveConfig: false
    disableSelinux: false
:::

After the SPI completes, you can verify SELinux is still enabled by running this command; the Current mode should be “enforcing:”

`sudo sestatus`

:::BlockQuote
SELinux status: enabled 
SELinuxfs mount: /sys/fs/selinux 
SELinux root directory: /etc/selinux 
Loaded policy name: targeted 
Current mode: enforcing 
Mode from config file: enforcing 
Policy MLS status: enabled 
Policy deny\_unknown status: allowed 
Max kernel policy version: 31
:::

See [Overriding Installer Settings](docId\:X7jKIJjG4IP6y3FqQqxyI) for instructions on how to specify the installer override file during the install and join node commands.