diff --git a/debian/changelog b/debian/changelog
index cfdbe085e..22093b915 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -19,6 +19,7 @@ linux-2.6 (3.1.0-1~experimental.1) UNRELEASED; urgency=low
   * Remove linux-tools-* binary package.
   * Drop external module packages stuff.
   * Set default security module to Unix Discretionary Access Controls.
+    - Remove unneeded selinux boot parameter.
 
  -- Ben Hutchings <ben@decadent.org.uk>  Tue, 27 Sep 2011 06:02:56 +0100
 
diff --git a/debian/config/config b/debian/config/config
index 96f3e0d7f..c6f90d06f 100644
--- a/debian/config/config
+++ b/debian/config/config
@@ -4464,9 +4464,8 @@ CONFIG_DEFAULT_SECURITY_DAC=y
 ## file: security/selinux/Kconfig
 ##
 CONFIG_SECURITY_SELINUX=y
-CONFIG_SECURITY_SELINUX_BOOTPARAM=y
-CONFIG_SECURITY_SELINUX_BOOTPARAM_VALUE=0
-CONFIG_SECURITY_SELINUX_DISABLE=y
+# CONFIG_SECURITY_SELINUX_BOOTPARAM is not set
+# CONFIG_SECURITY_SELINUX_DISABLE is not set
 CONFIG_SECURITY_SELINUX_DEVELOP=y
 CONFIG_SECURITY_SELINUX_AVC_STATS=y
 CONFIG_SECURITY_SELINUX_CHECKREQPROT_VALUE=1