Description of problem: Version-Release number of selected component (if applicable):108 How reproducible: Steps to Reproduce: 1. Boot Fedora Workstation Live (ie. using qemu-kvm) 2. Run: pasta ip addr Actual results: Failed to remount /: Permission denied Failed to sandbox process, exiting Expected results: 1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000 link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 inet 127.0.0.1/8 scope host lo valid_lft forever preferred_lft forever inet6 ::1/128 scope host proto kernel_lo valid_lft forever preferred_lft forever Additional info: This prevents usage of podman with SELinux enabled from a live booted system. I think root should be labelled as system_u:object_r:root_t:s0 This is part of the dracut-live module.
If `chcon -t root_t / /run/overlayfs /run/ovltest` is added to `/usr/libexec/livesys/livesys-main`, which runs in Fedora soon after startup, the labels are set as desired. Is this remedy sufficient for the problem?
For sure. But I'd rather have this fixed in dracut-live instead of livesys-scripts as any live environment is suffering from this.
Cross referencing issue at dracut-ng: https://github.com/dracut-ng/dracut-ng/issues/1042 and Fedora SELinux mailing list: https://lists.fedoraproject.org/archives/list/selinux@lists.fedoraproject.org/message/KWLKHKRHJOUXDBHNJ76O267BNM53FEPS/