diff --git a/elements/nova-baremetal/os-refresh-config/configure.d/82-nova-baremetal-selinux b/elements/nova-baremetal/os-refresh-config/configure.d/82-nova-baremetal-selinux
new file mode 100755
index 000000000..a1e471964
--- /dev/null
+++ b/elements/nova-baremetal/os-refresh-config/configure.d/82-nova-baremetal-selinux
@@ -0,0 +1,8 @@
+#!/bin/bash
+set -eux
+
+[ -x /usr/sbin/restorecon ] || exit 0
+
+# /tftpboot is created in 80-nova-baremetal.
+# Here we are ensuring it is labeled correctly.
+restorecon -R /tftpboot
\ No newline at end of file