[Freeipa-users] SELinux is preventing generating SID on RHEL9

Hi, I upgraded Fedora staging environment to RHEL 9 and encountered this issue https://access.redhat.com/solutions/7015184. To resolve that I tried to run `ipa config-mod --enable-sid --add-sids`, but it failed on `The ipa-enable-sid command failed, exception: PermissionError: [Errno 13] Permission denied: '/etc/krb5.conf.ipabkp'` As expected this was SELinux issue ``` type=AVC msg=audit(1701349641.295:30008): avc:  denied  { write } for  pid=157909 comm="org.freeipa.ser" name="etc" dev="dm-0" ino=33685633 scontext=system_u:system_r:ipa_helper_t:s0 tcontext=system_u:object_r:etc_t:s0 tclass=dir permissive=0 ``` I tried to relabel the whole system to fix it, but the denial is still there. Did I miss something? Shouldn't IPA server had access to /etc? Michal