Enable enforcing SELinux for sealed images #2035

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged

cgwalters merged 3 commits into bootc-dev:main from jeckersb:relabel-root

Mar 7, 2026

+26 −13

Merged

Enable enforcing SELinux for sealed images #2035

Remove enforcing=0 for sealed composefs

DCO-2 / DCO succeeded Mar 6, 2026 in 0s

Check passed!

All commits are signed off, the check passed.

Summary

	Sha	Message	Pass or fail reason
🟢	bc2e2dc	install: Label composefs objects as /usr for SELin...	`Valid sign-off found`
🟢	318d784	install: Add final SELinux relabel of the physical...	`Valid sign-off found`
🟢	959c939	Remove enforcing=0 for sealed composefs	`Valid sign-off found`

View more details on DCO-2