Markus Hilger 551658b5fe Label overlay upper layer of suse16 diskless images for SELinux ...

The initramfs writes the overlay upper layer before the SELinux policy
is loaded, so those files are unlabeled_t. On an enforcing image /
itself is unlabeled, and logind, getty and sshd fail.

Label exactly the upper layer paths like el9-diskless does. The root
is an overlay in untethered mode too, so this covers both. chcon comes
from the image, the initramfs has none.

2026-10-31 01:37:16 +01:00

..

initramfs/var/lib/dracut/hooks/cmdline

Support confluent= in suse16 diskless initramfs

2026-10-31 00:50:45 +01:00

profiles/default

Label overlay upper layer of suse16 diskless images for SELinux

2026-10-31 01:37:16 +01:00