NSA SELinux boot parameter

configname: CONFIG_SECURITY_SELINUX_BOOTPARAM

Linux Kernel Configuration
└─>Security options
└─>NSA SELinux boot parameter
In linux kernel since version 2.6.12  
This option adds a kernel parameter 'selinux', which allows SELinux
to be disabled at boot. If this option is selected, SELinux
functionality can be disabled with selinux=0 on the kernel
command line. The purpose of this option is to allow a single
kernel image to be distributed with SELinux built in, but not
necessarily enabled.

If you are unsure how to answer this question, answer N.