Comment # 4 on bug 1234621 from Thorsten Kukuk

(In reply to pallas wept from comment #2)

> > as the default for Tumbleweed is AppArmor and not SELinux.
> 
> Pardon me if I've misunderstood, but for new installations, I understood
> that the default would be SELinux since recently?
> ( https://bugzilla.opensuse.org/show_bug.cgi?id=1230118 )

Doesn't matter, the default LSM in the kernel is AppArmor on Tumbleweed and
"security=selinux" needs always be set, else AppArmor is enabled and SELinux
stays disabled.
Changing the kernel default is not possible as this would break all existing
systems out there.