A method for updating a SELinux security policy and a terminal. The method includes receiving, by the terminal, a security policy file sent by a server. The method further includes, performing, by the terminal in a power-on status, storing the security policy file in preset storage space by using a first service or process, modifying, by the terminal, a value of a preset attribute value from a first value to a second value by using the first service or process, reading, when it is detected that the value of the preset attribute value is changed from the first value to the second value, the security policy file from the preset storage space by using a second service or process and writing the security policy file into a memory, and loading, by the terminal, the security policy file in the memory by using the second service or process.