diff --git a/selinux-policy.spec b/selinux-policy.spec
index 8a757112b781805547a9bd5d7743aa5e72a77e69..617050e45efb43c9a04f09d8725c7ca9395ec376 100644
--- a/selinux-policy.spec
+++ b/selinux-policy.spec
@@ -12,7 +12,7 @@
 Summary: SELinux policy configuration
 Name:    selinux-policy
 Version: 3.14.2
-Release: 61
+Release: 62
 License: GPLv2+
 URL:     https://github.com/fedora-selinux/selinux-policy/
 
@@ -378,7 +378,7 @@ echo "
 #     enforcing - SELinux security policy is enforced.
 #     permissive - SELinux prints warnings instead of enforcing.
 #     disabled - No SELinux policy is loaded.
-SELINUX=enforcing
+SELINUX=permissive
 # SELINUXTYPE= can take one of these three values:
 #     targeted - Targeted processes are protected,
 #     minimum - Modification of targeted policy. Only selected processes are protected. 
@@ -411,7 +411,7 @@ exit 0
 %dir %{_usr}/share/selinux
 %dir %{_usr}/share/selinux/packages
 %dir %{_sysconfdir}/selinux
-%ghost %config(noreplace) %{_sysconfdir}/selinux/config
+%ghost %{_sysconfdir}/selinux/config
 %ghost %{_sysconfdir}/sysconfig/selinux
 %{_usr}/lib/tmpfiles.d/selinux-policy.conf
 %{_rpmconfigdir}/macros.d/macros.selinux-policy
@@ -733,6 +733,9 @@ exit 0
 %endif
 
 %changelog
+* Fri Sep 25 2020 openEuler Buildteam <buildteam@openeuler.org> - 3.14.2-62
+- set default SELinux mode to permissive
+
 * Thu Sep 24 2020 openEuler Buildteam <buildteam@openeuler.org> - 3.14.2-61
 - add add-firewalld-fc.patch