# KOTS: enable selinux in kURL Installer

**URL:** <https://community.replicated.com/t/kots-enable-selinux-in-kurl-installer/500>\
**Category:** Supporting your customers\
**Created:** [February 12, 2021, 10:01am UTC](https://community.replicated.com/t/kots-enable-selinux-in-kurl-installer/500 "2021-02-12T10:01:46Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![AJ-Jester](https://yyz2.discourse-cdn.com/flex030/user_avatar/community.replicated.com/aj-jester/32/94_2.png) [@AJ-Jester](https://community.replicated.com/u/AJ-Jester)\
**Post date:** [February 12, 2021, 10:01am UTC](https://community.replicated.com/t/kots-enable-selinux-in-kurl-installer/500/1 "2021-02-12T10:01:46Z")

</div>

If the SELinux kURL addon is configured, kURL install will not prompt to disable it when installing and apply any supplied configs.

```auto
apiversion: cluster.kurl.sh/v1beta1
kind: Installer
metadata:
  name: ""
spec:
  selinuxConfig:
    selinux: "enforcing"
    preserveConfig: false
    disableSelinux: false

```

You can add this config in one of two ways.

- Using a kURL YAML [Patch file](https://kurl.sh/docs/install-with-kurl/) and applying the config at kurl install time.  
`curl https://kurl.sh/latest | sudo bash -s installer-spec-file=[path to YAML patch]`

- Adding the kURL YAML to the kURL installer in [vendor.replicated.com](https://vendor.replicated.com/).

But please note its up to the customer to ensure SELinux is configured properly and support for these installs is provided on a best-effort basis. Overall the end-customer is responsible for SELinux.
