firstboot: make sure labelling is enabled

Preparation to address #37857.

diff --git a/src/firstboot/firstboot.c b/src/firstboot/firstboot.c
index 6bfc2dc12753da81c98c129241df737358703dd1..a7654ca6159324c8ecdf584b8bf9e0d364bf0633 100644 (file)
--- a/src/firstboot/firstboot.c
+++ b/src/firstboot/firstboot.c
@@ -29,6 +29,7 @@
 #include "image-policy.h"
 #include "kbd-util.h"
 #include "label.h"
+#include "label-util.h"
 #include "libcrypt-util.h"
 #include "locale-util.h"
 #include "lock-util.h"
@@ -1685,6 +1686,10 @@ static int run(int argc, char *argv[]) {
                 }
         }
 
+        r = mac_init();
+        if (r < 0)
+                return r;
+
         if (arg_image) {
                 assert(!arg_root);