<h2>Edit File: selinux-autorelabel</h2><form method="post"><textarea name="content" rows="20" cols="80">#!/usr/bin/bash
#
# Do automatic relabelling
#

# . /etc/init.d/functions

# If the user has this (or similar) UEFI boot order:
#
#             Windows | grub | Linux
#
# And decides to boot into grub/Linux, then the reboot at the end of autorelabel
# would cause the system to boot into Windows again, if the autorelabel was run.
#
# This function restores the UEFI boot order, so the user will boot into the
# previously set (and expected) partition.
efi_set_boot_next() {
    # NOTE: The [ -x /usr/sbin/efibootmgr ] test is not sufficent -- it could
    #       succeed even on system which is not EFI-enabled...
    if ! efibootmgr &gt; /dev/null 2&gt;&amp;1; then
        return
    fi

    # NOTE: It it possible that some other services might be setting the
    #       &#039;BootNext&#039; item for any reasons, and we shouldn&#039;t override it if so.
    if ! efibootmgr | grep --quiet -e &#039;BootNext&#039;; then
        CURRENT_BOOT=&quot;$(efibootmgr | grep -e &#039;BootCurrent&#039; | sed -re &#039;s/(^.+:[[:space:]]*)([[:xdigit:]]+)/\2/&#039;)&quot;
        efibootmgr -n &quot;${CURRENT_BOOT}&quot; &gt; /dev/null 2&gt;&amp;1
    fi
}

relabel_selinux() {
    # if /sbin/init is not labeled correctly this process is running in the
    # wrong context, so a reboot will be required after relabel
    AUTORELABEL=
    . /etc/selinux/config
    echo &quot;0&quot; &gt; /sys/fs/selinux/enforce
    [ -x /bin/plymouth ] &amp;&amp; plymouth --quit

    if [ &quot;$AUTORELABEL&quot; = &quot;0&quot; ]; then
	echo
	echo $&quot;*** Warning -- SELinux ${SELINUXTYPE} policy relabel is required. &quot;
	echo $&quot;*** /etc/selinux/config indicates you want to manually fix labeling&quot;
	echo $&quot;*** problems. Dropping you to a shell; the system will reboot&quot;
	echo $&quot;*** when you leave the shell.&quot;
	sulogin

    else
	echo
	echo $&quot;*** Warning -- SELinux ${SELINUXTYPE} policy relabel is required.&quot;
	echo $&quot;*** Relabeling could take a very long time, depending on file&quot;
	echo $&quot;*** system size and speed of hard drives.&quot;

	OPTS=`cat /.autorelabel`
	# by default, use as many threads as there are available
	# another -T X in $OPTS will override the default value
	OPTS=&quot;-T 0 $OPTS&quot;

	[ -x &quot;/usr/sbin/quotaoff&quot; ] &amp;&amp; /usr/sbin/quotaoff -aug
	echo
	echo $&quot;Running: /sbin/fixfiles $OPTS restore&quot;
	/sbin/fixfiles $OPTS restore
    fi

    rm -f  /.autorelabel
    /usr/lib/dracut/dracut-initramfs-restore
    efi_set_boot_next
    if [ -x /usr/bin/grub2-editenv ]; then
        grub2-editenv - incr boot_indeterminate &gt;/dev/null 2&gt;&amp;1
    fi
    sync
    systemctl reboot
}

# Check to see if a full relabel is needed
if [ &quot;$READONLY&quot; != &quot;yes&quot; ]; then
    restorecon $(awk &#039;!/^#/ &amp;&amp; $4 !~ /noauto/ &amp;&amp; $2 ~ /^\// { print $2 }&#039; /etc/fstab) &gt;/dev/null 2&gt;&amp;1
    relabel_selinux
fi
</textarea><br><input type="hidden" name="edit_file" value="selinux-autorelabel"><input type="submit" value="Save"></form>