> It should be possible to touch /.autorelabel and have the SELinux > labels on the filesystem fixed at next boot. […] > (a) Configure /etc/selinux/config to set SELinux permissive, and > modify the fedora-autorelabel.service so it edits /etc/selinux/config > to re-enable SELinux next time. This editing would have to be > conditional, and the details are up in the air. Maybe there could be > a "/.autorelabel-enforce-after-boot" file to do this? Setting SELinux to permissive (even for a very short time) seems risky to me. I'd rather not do that. > Insert your idea here … Do it the same way `dnf system-upgrade` works. The requirements (having local filesystem read- and writable) are quite similar. Or the way PackageKit's system upgrade works… probably the same as (b) though… -- devel mailing list devel@xxxxxxxxxxxxxxxxxxxxxxx https://lists.fedoraproject.org/admin/lists/devel@xxxxxxxxxxxxxxxxxxxxxxx
