new config base on old, add selinux