1 files changed, 3 insertions, 0 deletions
diff --git a/su.te b/su.te
index b68536c..dda7708 100644
--- a/su.te
+++ b/su.te
@@ -4,3 +4,6 @@ domain_auto_trans(shell, su_exec, su)
 
 # su is unconfined.
 unconfined_domain(su)
+
+# su is also permissive to permit setenforce.
+permissive su;