Comment # 5 on bug 1234621 from pallas wept

Ahhh my mistake then! Thanks for the correction.

So, is there an existing method, a 'right way' to ensure that
"security=selinux" is added to the recovery mode entries in grub? Is it
normally done, by the installer, by a package, only manually, not at all
(intentionally) or not at all (unintentionally)? Probably something else that I
didn't think of yet? :)

A little bit off-topic, but I also wonder how does a new installation add that
parameter, for the normal boot entries (which I did manually already per the
document linked above)? Is that an installer feature, packaged, etc? Although
that's working fine for me now, I wonder because I'd like to understand how it
works for the future of my machines. I couldn't see anything about it in
packages so I figured that the installer must modify /etc/default/grub ... but
that's just a guess.