diff --git a/bsp_diff/caas/device/intel/project-celadon/0048-Disable-trusty-and-selinux-to-permissive.patch b/bsp_diff/caas/device/intel/project-celadon/0048-Disable-trusty-and-selinux-to-permissive.patch
new file mode 100644
index 0000000..0aeb4e3
--- /dev/null
+++ b/bsp_diff/caas/device/intel/project-celadon/0048-Disable-trusty-and-selinux-to-permissive.patch
@@ -0,0 +1,36 @@
+From 7ff06a97fe476b347efae9a760458db69b6e6e33 Mon Sep 17 00:00:00 2001
+From: "Kothapeta, BikshapathiX" <bikshapathix.kothapeta@intel.com>
+Date: Sat, 13 May 2023 17:08:59 +0530
+Subject: [PATCH] Disable trusty, and selinux to permissive
+
+Tracked-On:
+Signed-off-by: Kothapeta, BikshapathiX <bikshapathix.kothapeta@intel.com>
+
+diff --git a/caas/mixins.spec b/caas/mixins.spec
+index b84af5b..bbe259b 100755
+--- a/caas/mixins.spec
++++ b/caas/mixins.spec
+@@ -10,7 +10,7 @@ product.mk: device.mk
+ kernel: gmin64(useprebuilt=false,src_path=kernel/lts2020-chromium, loglevel=7, interactive_governor=false, relative_sleepstates=false, modules_in_bootimg=false, external_modules=,debug_modules=, use_bcmdhd=false, use_iwlwifi=false, extmod_platform=bxt, iwl_defconfig=, cfg_path=config-lts/lts2020-chromium, more_modules=true, chromium_src_path=kernel/lts2019-chromium, chromium_cfg_path=config-lts/lts2019-chromium, lts2020_yocto_src_path=kernel/lts2020-yocto-sriov, lts2020_yocto_cfg_path=config-lts/lts2020-yocto-sriov, lts2020_chromium_src_path=kernel/lts2020-chromium, lts2020_chromium_cfg_path=config-lts/lts2020-chromium)
+ disk-bus: auto
+ boot-arch: project-celadon(uefi_arch=x86_64,fastboot=efi,ignore_rsci=true,disable_watchdog=true,watchdog_parameters=10 30,verity_warning=false,txe_bind_root_of_trust=false,bootloader_block_size=4096,verity_mode=false,disk_encryption=false,file_encryption=true,metadata_encryption=true,fsverity=true,target=caas,ignore_not_applicable_reset=true,self_usb_device_mode_protocol=true,usb_storage=true,live_boot=true,userdata_checkpoint=false)
+-sepolicy: enforcing
++sepolicy: permissive
+ bluetooth: btusb(ivi=false)
+ audio: project-celadon
+ vendor-partition: true(partition_size=600,partition_name=vendor)
+@@ -54,9 +54,9 @@ lights: true
+ power: true(power_throttle=true)
+ debug-usb-config: true(source_dev=dvcith-0-msc0)
+ intel_prop: true
+-trusty: true(ref_target=celadon_64)
++trusty: false(ref_target=celadon_64)
+ memtrack: true
+-tpm: true
++tpm: false
+ avx: auto
+ health: hal
+ slot-ab: true
+-- 
+2.40.1
+