From 06889f6fa4ab68132a22f26dff3cf1194702454c Mon Sep 17 00:00:00 2001
From: Amrita <amrita.sakthivel@suse.com>
Date: Thu, 23 Oct 2025 16:22:58 +0530
Subject: [PATCH 1/3] dc file and profiling

---
 DC-SAP-SELinux             | 15 +++++++++++++++
 concepts/selinux-modes.xml |  8 +++-----
 2 files changed, 18 insertions(+), 5 deletions(-)
 create mode 100644 DC-SAP-SELinux

diff --git a/DC-SAP-SELinux b/DC-SAP-SELinux
new file mode 100644
index 000000000..2a677ba7d
--- /dev/null
+++ b/DC-SAP-SELinux
@@ -0,0 +1,15 @@
+# This file originates from the project https://github.com/openSUSE/doc-kit
+# This file can be edited downstream.
+
+MAIN="SELinux.asm.xml"
+# Point to the ID of the <structure> of your assembly
+SRC_DIR="articles"
+IMG_SRC_DIR="images"
+
+PROFOS="sles4sap"
+PROFCONDITION="16.0"
+#PROFCONDITION="suse-product;beta"
+#PROFCONDITION="community-project"
+
+STYLEROOT="/usr/share/xml/docbook/stylesheet/suse2022-ns"
+FALLBACK_STYLEROOT="/usr/share/xml/docbook/stylesheet/suse-ns"
\ No newline at end of file
diff --git a/concepts/selinux-modes.xml b/concepts/selinux-modes.xml
index 565a01ea5..4df8eebdc 100644
--- a/concepts/selinux-modes.xml
+++ b/concepts/selinux-modes.xml
@@ -20,11 +20,9 @@
     <!-- can be changed via merge in the assembly -->
     <!--add author's email address-->
     <meta name="maintainer" content="jsindelarova@suse.com" its:translate="no"/>
-
   </info>
   <para>
    &selnx; can run in <literal>enforcing</literal> or <literal>permissive</literal> mode:
-
   </para>
  <variablelist>
  <varlistentry>
@@ -42,9 +40,9 @@
     </listitem>
          </varlistentry>
   </variablelist>
-<para>The default in &productnameshort; &productnumber; is <literal>enforcing</literal> mode.</para>
-  <para>
-    For information about switching between &selnx; modes, refer to
+<para><phrase os="sles">The default in &productnameshort; &productnumber; 16 is <literal>enforcing</literal> mode.</phrase></para>
+  <para><phrase os="sles4sap">The default in &sles4sap; 16 is enabled in <literal>permissive</literal> mode.</phrase></para>
+ <para> For information about switching between &selnx; modes, refer to
     <xref linkend="selinux-switching-modes"/>.
   </para>
 </topic>

From c8f0f1d004e8c1cafc7c4b00490754452f10254a Mon Sep 17 00:00:00 2001
From: Amrita <amrita.sakthivel@suse.com>
Date: Thu, 23 Oct 2025 16:25:33 +0530
Subject: [PATCH 2/3] adds sap patterns

---
 concepts/selinux-modes.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/concepts/selinux-modes.xml b/concepts/selinux-modes.xml
index 4df8eebdc..76f0d0bb3 100644
--- a/concepts/selinux-modes.xml
+++ b/concepts/selinux-modes.xml
@@ -41,7 +41,7 @@
          </varlistentry>
   </variablelist>
 <para><phrase os="sles">The default in &productnameshort; &productnumber; 16 is <literal>enforcing</literal> mode.</phrase></para>
-  <para><phrase os="sles4sap">The default in &sles4sap; 16 is enabled in <literal>permissive</literal> mode.</phrase></para>
+  <para><phrase os="sles4sap">The default in &sles4sap; 16 is enabled in <literal>permissive</literal> mode, if &sap; patterns are installed.</phrase></para>
  <para> For information about switching between &selnx; modes, refer to
     <xref linkend="selinux-switching-modes"/>.
   </para>

From 917cd95a6106c34f852fa28fedbcba2bcaa7a165 Mon Sep 17 00:00:00 2001
From: Amrita <amrita.sakthivel@suse.com>
Date: Thu, 23 Oct 2025 17:06:57 +0530
Subject: [PATCH 3/3] package

---
 tasks/selinux-packages.xml | 8 +++++++-
 1 file changed, 7 insertions(+), 1 deletion(-)

diff --git a/tasks/selinux-packages.xml b/tasks/selinux-packages.xml
index 34fc1ac6e..1ce8ce912 100644
--- a/tasks/selinux-packages.xml
+++ b/tasks/selinux-packages.xml
@@ -44,9 +44,15 @@
     easier. This includes tools such as <command>audit2allow</command> and
     <command>semanage</command>. If the package is missing, run the following command to install it:
   </para>
-<screen os="sles;sles4sap">
+ <screen os="sles;sles4sap">
 &prompt.sudo;<command>zypper install policycoreutils-python-utils</command>
 </screen>
+<para><phrase os="sles4sap">
+  The<literal>selinux-policy-sapenablement</literal> package is for &selnx; policy changes for running &sap;.
+  Currently it sets the settings that are needed, but still sets &selnx; to <literal>permissive</literal> mode.
+  Users can set it to <literal>enforcing</literal> mode again to use the base policy module &suse; provides.
+  This package is installed by default.
+  </phrase></para>
 <screen os="slmicro">&prompt.sudo;<command>transactional-update pkg install policycoreutils-python-utils</command></screen>
   <para os="sles;sles4sap">
     The &selnx; man pages contain comprehensive documentation on the options