Re: [atomic-devel] AVCs on fedora atomic host 91f0a3478e preventing ssh login

[Daniel J Walsh <dwalsh redhat com>]

On 09/15/2015 05:09 AM, Stef Walter wrote:
> On 15.09.2015 08:51, Tobias Florek wrote:
>>>> Try `ostree fsck`.  If that gives you errors, `ostree fsck --delete; touch /ostree/repo/transaction; atomic host upgrade` should reset things.
>>> Unfortunately that did not work (yet).
>> When an atomic host upgrade became available today, it worked perfectly.
>> Thank you for showing me the way to fix it.
> Colin, so does the presence of /.autorelabel mean that an Atomic system
> will kill itself next time it reboots?
>
> Stef
>
>
We should get the autorelabel feature not to kill an atomic platform. 
We need
to fix the labeling and add directories to
/etc/selinux/fixfiles_exclude_dirs to prevent relabeling.