Comment # 21 on bug 1199520 from Felix Niederwanger

Yes that seems to work!

> # transactional-update shell
> (therein) zypper in microos-tools
> (therein) touch /etc/selinux/.autorelabel
> (therein) vim /etc/selinux/config         # set from permissive to enforcing
> reboot

Then the login works, via ssh and via login terminal. SELinux is set to
enforcing, so that's also OK:

> bsc1199520:~ # sestatus
> SELinux status:                 enabled
> SELinuxfs mount:                /sys/fs/selinux
> SELinux root directory:         /etc/selinux
> Loaded policy name:             targeted
> Current mode:                   enforcing
> Mode from config file:          enforcing
> Policy MLS status:              enabled
> Policy deny_unknown status:     allowed
> Memory protection checking:     actual (secure)
> Max kernel policy version:      33

Hope that helps.