i was playing around getting stumpwm running on silverblue rawhide and tried to install a .desktop file for gdm. i dropped the file in /etc/X11/session which did not work, so i thought it might be an issue with a selinux label. so i ran fixfiles restore /etc/X11 which did not change anything, so i manually ran chcon -u system_u /etc/X11/sessions/stumpwm.session which changed the user to system_u. so far so good
but after rebooting it seems that all selinux labels on the filesystem got reset to default_t. maybe (or for sure…) i did something completely stupid while hacking around…
i’m currently looking only at systemd as starting various services failed because of this.
# ls -laZ /usr/lib/systemd/systemd -rwxr-xr-x. 4 root root system_u:object_r:default_t:s0 2402648 Jan 1 1970 /usr/lib/systemd/systemd
on a silverblue vagrant box which is working fine this yields
# ls -laZ /usr/lib/systemd/systemd -rwxr-xr-x. 4 root root system_u:object_r:init_exec_t:s0 2402648 Dec 31 1969 /usr/lib/systemd/systemd
looking at more files it seems all domains got reset to default_t
what is the recommend way to restore the right selinux labels under silverblue?
i tried touching /.autorelabel, but of course this does not work on silverblue. fixfiles -F onboot also fails because of this:
# ]# fixfiles -F onboot /usr/sbin/fixfiles: line 313: /.autorelabel: Operation not permitted
i’m currently running selinux in permissive mode, but a fix without reinstalling would be great
hope this is the right channel to ask
thanks for your time and help