diff --git a/disable-selinux/xexecscript.d/disable-selinux.sh b/disable-selinux/xexecscript.d/disable-selinux.sh
new file mode 100755
index 0000000..c9adcd8
--- /dev/null
+++ b/disable-selinux/xexecscript.d/disable-selinux.sh
@@ -0,0 +1,16 @@
+#!/bin/bash
+#
+# requires:
+#  bash
+#
+set -e
+set -o pipefail
+
+declare chroot_dir=$1
+
+chroot $1 $SHELL -ex <<'EOS'
+  if [[ -f /etc/selinux/config ]]; then
+    sed -i "s/^\(SELINUX=\).*/\1disabled/" /etc/selinux/config
+    egrep ^SELINUX= /etc/selinux/config
+  fi
+EOS