So the facter logic is to first check that there is an selinuxfs mount point, and then check that there's an enforce file under that mount point, and then do this check.  As it stands this will report selinux == true on non-selinux systems.

But I'm wondering if the facter logic is overkill. We figured out the part that insists the content of this file != "kernel" is unnecessary. But I'm wondering further if we need to check this file at all, or if just the presence of <selinuxfs mount point>/enforce (or perhaps just the presence of <selinuxfs mount point>?) suffices.