Description of problem:
I get a SELinux alert on boot.

Version-Release number of selected component (if applicable):
selinux-policy-targeted-44.9-1.fc44.noarch
bootupd-0.2.35-1.fc44.x86_64

How reproducible:
Seems to happen at every boot (at least)

Steps to Reproduce:
1. Have Fedora atomic (Silverblue in my case) installed
2. Boot
3. Have a look at logs

Actual results:
SELinux Alert Browser mentions an error to me and recommends:

> You should report this as a bug.
> You can generate a local policy module to allow this access.
> Allow this access for now by executing:
> # ausearch -c 'bootupctl' --raw | audit2allow -M my-bootupctl
> # semodule -X 300 -i my-bootupctl.pp

Expected results:
No SELinux denials should have happened

Additional info:
Output from SELinux Alert Browser, "Details" window:
==========
SELinux is preventing bootupctl from read access on the directory /proc.

*****  Plugin restorecon (99.5 confidence) suggests   ************************

If you want to fix the label. 
/proc default label should be default_t.
Then you can run restorecon. The access attempt may have been stopped due to insufficient permissions to access a parent directory in which case try to change the following command accordingly.
Do
# /sbin/restorecon -v /proc

*****  Plugin catchall (1.49 confidence) suggests   **************************

If you believe that bootupctl should be allowed read access on the proc directory by default.
Then you should report this as a bug.
You can generate a local policy module to allow this access.
Do
allow this access for now by executing:
# ausearch -c 'bootupctl' --raw | audit2allow -M my-bootupctl
# semodule -X 300 -i my-bootupctl.pp

Additional Information:
Source Context                system_u:system_r:bootupd_t:s0
Target Context                system_u:object_r:proc_t:s0
Target Objects                /proc [ dir ]
Source                        bootupctl
Source Path                   bootupctl
Port                          <Unknown>
Host                          [removed]
Source RPM Packages           
Target RPM Packages           
SELinux Policy RPM            selinux-policy-targeted-44.9-1.fc44.noarch
Local Policy RPM              
Selinux Enabled               True
Policy Type                   targeted
Enforcing Mode                Enforcing
Host Name                     [removed]
Platform                      Linux [removed] 7.2.5-200.fc44.x86_64 #1 SMP
                              PREEMPT_DYNAMIC Fri Sep 11 15:11:05 UTC 2026
                              x86_64
Alert Count                   33
First Seen                    2026-08-23 16:01:05 CEST
Last Seen                     2026-09-19 09:55:26 CEST
Local ID                      b9e5cf22-d80e-4351-9813-dea4bee2c568

Raw Audit Messages
type=AVC msg=audit(1789804526.625:108): avc:  denied  { read } for  pid=1007 comm="bootupctl" name="/" dev="proc" ino=1 scontext=system_u:system_r:bootupd_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1


Hash: bootupctl,bootupd_t,proc_t,dir,read