diff --git a/instances/modeling.emft.emfatic/config.jsonnet b/instances/modeling.emft.emfatic/config.jsonnet
index 5c2ec11dc..22a2bde3a 100644
--- a/instances/modeling.emft.emfatic/config.jsonnet
+++ b/instances/modeling.emft.emfatic/config.jsonnet
@@ -7,5 +7,6 @@
     plugins+: [
       "gerrit-trigger",
     ]
-  }
+  },
+  seLinuxLevel: "s0:c38,c12",
 }
diff --git a/instances/modeling.emft.emfatic/target/config.json b/instances/modeling.emft.emfatic/target/config.json
index d7277ffad..bd6e3dd14 100644
--- a/instances/modeling.emft.emfatic/target/config.json
+++ b/instances/modeling.emft.emfatic/target/config.json
@@ -900,6 +900,7 @@
       },
       "generate": false
    },
+   "seLinuxLevel": "s0:c38,c12",
    "secrets": {
       "dockerconfigjson": {
          "dockerconfigjson-for-pull-as-default": {
diff --git a/instances/modeling.emft.emfatic/target/k8s/statefulset.json b/instances/modeling.emft.emfatic/target/k8s/statefulset.json
index cd36c9dd9..88ebc6ae1 100644
--- a/instances/modeling.emft.emfatic/target/k8s/statefulset.json
+++ b/instances/modeling.emft.emfatic/target/k8s/statefulset.json
@@ -119,7 +119,12 @@
                         "cpu": "250m"
                      }
                   },
-                  "securityContext": { },
+                  "securityContext": {
+                     "seLinuxOptions": {
+                        "level": "s0:c38,c12",
+                        "type": "spc_t"
+                     }
+                  },
                   "volumeMounts": [
                      {
                         "mountPath": "/var/jenkins",