As reported by Petr Lautrbach (lautrbach@xxxxxxxxxx), commit d96f27bf7cb9 ("libsemanage: Preserve file context and ownership in policy store") can cause restorecon to use old data. Here is a possible fix. It seems to work. James Carter (2): libselinux: Close old selabel handle when setting a new one libsemanage: Set new restorecon handle before doing restorecon libselinux/src/selinux_restorecon.c | 4 ++++ libsemanage/src/semanage_store.c | 5 +++++ 2 files changed, 9 insertions(+) -- 2.48.1