base: fix selinux handling if .autorelabel is present

rhbz#557744

diff --git a/modules.d/99base/selinux-loadpolicy.sh b/modules.d/99base/selinux-loadpolicy.sh
index 9e95b8de95e925f44fca81c44b135edd048de2d2..5b91ee681fe051545e9032f1d7dff81227d64639 100755 (executable)
--- a/modules.d/99base/selinux-loadpolicy.sh
+++ b/modules.d/99base/selinux-loadpolicy.sh
@@ -37,6 +37,8 @@ rd_load_policy()
        } 2>&1 | vinfo
 
        if [ $ret -eq 0 -o $ret -eq 2 ]; then
+           # If machine requires a relabel, force to permissive mode
+           [ -e "$NEWROOT"/.autorelabel ] && ( echo 0 > "$NEWROOT"/selinux/enforce )
            return 0
        fi