diff --git a/refpolicy/policy/modules/kernel/kernel.te b/refpolicy/policy/modules/kernel/kernel.te
index dd995a4b..896ecdd8 100644
--- a/refpolicy/policy/modules/kernel/kernel.te
+++ b/refpolicy/policy/modules/kernel/kernel.te
@@ -25,7 +25,10 @@ role system_r;
 role sysadm_r;
 role staff_r;
 role user_r;
-role secadm_r;
+
+ifdef(`enable_mls',`
+	role secadm_r;
+')
 
 #
 # kernel_t is the domain of kernel threads.