selinux: fix "selinux=0" handling

diff --git a/modules.d/99base/selinux-loadpolicy.sh b/modules.d/99base/selinux-loadpolicy.sh
index f3bacec0280d281fbfaccfcd6982e53bc5d83699..93d6f2cff393cac7c58bb7b0f7f8eba829ac8b8b 100755 (executable)
--- a/modules.d/99base/selinux-loadpolicy.sh
+++ b/modules.d/99base/selinux-loadpolicy.sh
@@ -55,7 +55,7 @@ rd_load_policy()
            exit 1
        fi
        return 0
-    elif [ $permissive -eq 0 ]; then
+    elif [ $permissive -eq 0 -a $disabled -eq 0 ]; then
        warn "Machine in enforcing mode and cannot execute load_policy."
        warn "To disable selinux, add selinux=0 to the kernel command line."
        warn "Not continuing"