1. Install packages: selinux-utils policycoreutils selinux-policy checkpolicy (there will be some error on the package: policy-default , but ignore that. 2. cp /bin/sh /bin/sh.bak ; cp /bin/bash /bin/sh 3. policyvers >> /selinux/policyvers 4. Open with some text aditor: /usr/sbin/genhomedircon And on line 35 change the 'shells' to be on the same line as 'excempt:' 5. Change in /etc/selinux/config SELINUXTYPE to "targeted" mkdir /etc/selinux/targeted ; cp -r /etc/selinux/contexts /etc/selinux/targeted/ 6. cd /etc/selinux/src ; make - 7. make -s -C /etc/selinux/src install 8. sudo apt-get upgrade to get rid of the policy error 9. mkdir /etc/selinux/targeted cp -r /etc/selinux/contexts /etc/selinux/targeted/ fixfiles -f -F relabel 10. selinux-update 11. change in /etc/selinux/config to this: SELINUXTYPE=. 12. echo "1" >/selinux/enforce 13. grub kernel parameters , enforced=1 selinux=1