diff --git a/mkosi.conf b/mkosi.conf
index b1ac8950af..56a89e8c22 100644
--- a/mkosi.conf
+++ b/mkosi.conf
@@ -68,7 +68,6 @@ KernelCommandLine=systemd.crash_shell
                   systemd.default_device_timeout_sec=30
                   # Make sure no LSMs are enabled by default.
                   selinux=0
-                  enforcing=0
                   systemd.early_core_pattern=/core
                   systemd.firstboot=no
                   raid=noautodetect
diff --git a/test/TEST-06-SELINUX/meson.build b/test/TEST-06-SELINUX/meson.build
index ea1a381471..fd670ae40d 100644
--- a/test/TEST-06-SELINUX/meson.build
+++ b/test/TEST-06-SELINUX/meson.build
@@ -3,7 +3,7 @@
 integration_tests += [
         integration_test_template + {
                 'name' : fs.name(meson.current_source_dir()),
-                'cmdline' : integration_test_template['cmdline'] + ['selinux=1', 'lsm=selinux'],
+                'cmdline' : integration_test_template['cmdline'] + ['selinux=1', 'enforcing=0', 'lsm=selinux'],
                 # FIXME; Figure out why reboot sometimes hangs with 'linux' firmware.
                 # Use 'auto' to automatically fallback on non-uefi architectures.
                 'firmware' : 'auto',