I dont remember what exactly i did, but I broke SELinux somehow, deleted files and need to restore it. Normal procedure would be as far as I understood:
sudo setenforce 0 sudo dnf remove selinux-policy\* selinux-policy-targeted selinux-policy-devel policycoreutils-gui sudo rm -rf /etc/selinux/targeted /etc/selinux/config sudo dnf install selinux-policy-targeted sudo dnf install selinux-policy-devel policycoreutils-gui sudo touch /.autorelabel reboot
Problems here: /etc/ is writable but /.autorelabel can’t be created. As far as I understood this means you can delete but not restore the configs.
Also the SELinux packages have some weird dependency problems so they can’t be removed. On Atomic it would look like
sudo setenforce 0 rpm-ostree override remove selinux-policy\* selinux-policy-targeted selinux-policy-devel policycoreutils-gui && rpm-ostree install selinux-policy-targeted selinux-policy-devel sudo rm -rf /etc/selinux/targeted /etc/selinux/config #sudo touch /.autorelabel reboot