Private/RedHat/Set-UnattendedKickstartAntiMalware.ps1

function Set-UnattendedKickstartAntiMalware
{
    param (
        [Parameter(Mandatory = $true)]
        [bool]$Enabled
    )

    if ($Enabled)
    {
        $Script:un += "selinux --enforcing"
    }
    else
    {
        $Script:un += "selinux --permissive" # Not a great idea to disable selinux alltogether
    }
}