The base initrd is also used by the system image so selinux should be there even if not enabled by the base image.