On Dec 5, 2021, at 05:44, Nick Urbanik <nicku(a)nicku.org>
wrote:
I am regularly having selinux labels changing. This should never
happen, but it does quite continuously; many critical executables lose
their correct label, preventing me from logging in without a relabel.
This is Fedora 35, upgraded over quite a few generations of Fedora.
The root file system is ext4 on luks encryption on RAID 1.
Any suggestions on how to troubleshoot and determine the cause? I've
never had selinux labels decay before.
I’ve never heard of this happening except in cases where file systems were mounted in
alternate locations and written to. (For example, a chrooted OS mounted on a livecd)
Maybe it would help if you showed an example of paths and what context you found them in?
Knowing the incorrect context can sometimes help identify what is causing it.
--
Jonathan Billings