I dont remember what exactly i did, but I broke SELinux somehow, deleted files and need to restore it. Normal procedure would be as far as I understood:
Mutable Fedora:
sudo setenforce 0
sudo dnf remove selinux-policy\* selinux-policy-targeted selinux-policy-devel policycoreutils-gui
sudo rm -rf /etc/selinux/targeted /etc/selinux/config
sudo dnf install selinux-policy-targeted
sudo dnf install selinux-policy-devel policycoreutils-gui
sudo touch /.autorelabel
reboot
Problems here: /etc/ is writable but /.autorelabel can’t be created. As far as I understood this means you can delete but not restore the configs.
Also the SELinux packages have some weird dependency problems so they can’t be removed. On Atomic it would look like
sudo setenforce 0
rpm-ostree override remove selinux-policy\* selinux-policy-targeted selinux-policy-devel policycoreutils-gui && rpm-ostree install selinux-policy-targeted selinux-policy-devel
sudo rm -rf /etc/selinux/targeted /etc/selinux/config
#sudo touch /.autorelabel
reboot