diff --git a/selinux-policy.spec b/selinux-policy.spec
index 9457b6012b460509fc6d968b791e9a86e1fd0718..32065930d6fbf83bf4544319d1cba49a22d0096b 100644
--- a/selinux-policy.spec
+++ b/selinux-policy.spec
@@ -12,7 +12,7 @@
 Summary: SELinux policy configuration
 Name:    selinux-policy
 Version: 3.14.2
-Release: 48
+Release: 49
 License: GPLv2+
 URL:     https://github.com/fedora-selinux/selinux-policy/
 
@@ -336,7 +336,7 @@ echo "
 #     enforcing - SELinux security policy is enforced.
 #     permissive - SELinux prints warnings instead of enforcing.
 #     disabled - No SELinux policy is loaded.
-SELINUX=permissive
+SELINUX=enforcing
 # SELINUXTYPE= can take one of these three values:
 #     targeted - Targeted processes are protected,
 #     minimum - Modification of targeted policy. Only selected processes are protected. 
@@ -664,6 +664,9 @@ exit 0
 %endif
 
 %changelog
+* Sat Feb 29 2020 openEuler Buildteam <buildteam@openeuler.org> - 3.14.2-49
+- enable selinux
+
 * Wed Feb 26 2020 openEuler Buildteam <buildteam@openeuler.org> - 3.14.2-48
 - update avc for openEuler