diff --git a/tests/kola/selinux/default b/tests/kola/selinux/default
new file mode 100755
index 0000000000..9a54207402
--- /dev/null
+++ b/tests/kola/selinux/default
@@ -0,0 +1,14 @@
+#!/bin/bash
+# kola
+#   exclusive: false
+#   # if it works on QEMU, it should work everywhere
+#   platforms: qemu
+
+set -xeuo pipefail
+
+. $KOLA_EXT_DATA/commonlib.sh
+
+if ostree admin config-diff | grep 'selinux/targeted/policy'; then
+    fatal "SELinux policy is marked as modified"
+fi
+ok "SELinux policy not marked as modified"