diff --git a/linux-5.10/rk3568_patch/selinux_config.patch b/linux-5.10/rk3568_patch/selinux_config.patch
new file mode 100644
index 0000000000000000000000000000000000000000..17f8ac07471b3c6d74c25f9367043c92576847b3
--- /dev/null
+++ b/linux-5.10/rk3568_patch/selinux_config.patch
@@ -0,0 +1,13 @@
+diff --git a/linux-5.10/arch/arm64/configs/rk3568_standard_defconfig b/linux-5.10/arch/arm64/configs/rk3568_standard_defconfig
+index 76c7447..e900819 100644
+--- a/linux-5.10/arch/arm64/configs/rk3568_standard_defconfig
++++ b/linux-5.10/arch/arm64/configs/rk3568_standard_defconfig
+@@ -6204,7 +6204,7 @@ CONFIG_HARDENED_USERCOPY=y
+ CONFIG_SECURITY_SELINUX=y
+ CONFIG_SECURITY_SELINUX_BOOTPARAM=y
+ # CONFIG_SECURITY_SELINUX_DISABLE is not set
+-CONFIG_SECURITY_SELINUX_DEVELOP=y
++# CONFIG_SECURITY_SELINUX_DEVELOP is not set
+ CONFIG_SECURITY_SELINUX_AVC_STATS=y
+ CONFIG_SECURITY_SELINUX_CHECKREQPROT_VALUE=0
+ CONFIG_SECURITY_SELINUX_SIDTAB_HASH_BITS=9