diff --git a/config/Config-build.in b/config/Config-build.in
index 82e4c3a86a..98c5f1dc5a 100644
--- a/config/Config-build.in
+++ b/config/Config-build.in
@@ -322,12 +322,15 @@ menu "Global build settings"
 	choice
 		prompt "default SELinux type"
 		depends on TARGET_ROOTFS_SECURITY_LABELS
-		default SELINUXTYPE_targeted
+		default SELINUXTYPE_dssp
 		help
 		  Choose SELinux policy to be used for build.
 		config SELINUXTYPE_targeted
 			bool "targeted"
 			select PACKAGE_refpolicy
+		config SELINUXTYPE_dssp
+			bool "dssp"
+			select PACKAGE_selinux-policy
 	endchoice
 
 endmenu