diff --git a/templates-updates b/templates-updates
index de06e087..8b094c5c 100755
--- a/templates-updates
+++ b/templates-updates
@@ -979,6 +979,7 @@
                       name => "live_build",
                       settings => [
                         { key => "POSTINSTALL", value => "_live_build" },
+                        { key => "GRUB_POSTINSTALL", value => "selinux=0" },
                         { key => "USER_LOGIN", value => "false" },
                         { key => "ROOT_PASSWORD", value => "weakpassword" },
                         { key => "BOOTFROM", value => "c" },
diff --git a/tests/_live_build.pm b/tests/_live_build.pm
index d626a8ad..76f48291 100644
--- a/tests/_live_build.pm
+++ b/tests/_live_build.pm
@@ -10,8 +10,6 @@ sub run {
     my $arch = get_var("ARCH");
     my $subv = get_var("SUBVARIANT");
     my $lcsubv = lc($subv);
-    # we need to be in permissive mode or the built image has selinux issues
-    assert_script_run "setenforce Permissive";
     # install the tools we need
     assert_script_run "dnf -y install mock git pykickstart tar", 120;
     # make the update/task repo and the serial device available inside the mock root