diff --git a/magnum/templates/swarm/fragments/disable-selinux.sh b/magnum/templates/swarm/fragments/disable-selinux.sh
index 888c0e4467..49e9dc79a8 100644
--- a/magnum/templates/swarm/fragments/disable-selinux.sh
+++ b/magnum/templates/swarm/fragments/disable-selinux.sh
@@ -2,7 +2,3 @@
 #!/bin/sh
 
 setenforce 0
-
-sed -i '
-  /^SELINUX=/ s/=.*/=permissive/
-' /etc/selinux/config
diff --git a/magnum/templates/swarm/fragments/enable-services.sh b/magnum/templates/swarm/fragments/enable-services.sh
index d0f064e403..1c7ed9790a 100644
--- a/magnum/templates/swarm/fragments/enable-services.sh
+++ b/magnum/templates/swarm/fragments/enable-services.sh
@@ -7,3 +7,5 @@ for service in $NODE_SERVICES; do
     systemctl enable $service
     systemctl --no-block start $service
 done
+
+setenforce 1