Set CTS selinux as expected enforced by default

Test: cts unit tests
Bug: None
Change-Id: Ic0652ddd76e8e6b92722ff3639d2dcfe99155e74
diff --git a/tools/cts-tradefed/res/config/cts-system-checkers.xml b/tools/cts-tradefed/res/config/cts-system-checkers.xml
index 9c71d5a..7639bf9 100644
--- a/tools/cts-tradefed/res/config/cts-system-checkers.xml
+++ b/tools/cts-tradefed/res/config/cts-system-checkers.xml
@@ -17,7 +17,10 @@
     <system_checker class="com.android.tradefed.suite.checker.UserChecker" />
     <system_checker class="com.android.compatibility.common.tradefed.targetprep.NetworkConnectivityChecker" />
     <system_checker class="com.android.tradefed.suite.checker.ShellStatusChecker" />
-    <system_checker class="com.android.tradefed.suite.checker.EnforcedSeLinuxChecker" />
+    <system_checker class="com.android.tradefed.suite.checker.EnforcedSeLinuxChecker">
+        <!-- We expect selinux enforced for CTS -->
+        <option name="expect-enforced" value="true" />
+    </system_checker>
     <system_checker class="com.android.tradefed.suite.checker.KeyguardStatusChecker" />
     <system_checker class="com.android.tradefed.suite.checker.LeakedThreadStatusChecker" />
     <system_checker class="com.android.tradefed.suite.checker.TimeStatusChecker" />