diff --git a/ingredients/core-security-on.cfg b/ingredients/core-security-on.cfg
index 64e28a6..50fee86 100644
--- a/ingredients/core-security-on.cfg
+++ b/ingredients/core-security-on.cfg
@@ -1,3 +1,3 @@
-rootpw --lock # No root login from the console 
-selinux --enabled # Enable SELinux
+rootpw --lock # No root login from the console
+selinux --enforcing # Set SELinux to enforcing mode
 firewall --enabled # Enable firewall
\ No newline at end of file