From aaeeb8530189bbb58b5b3f94907687c95e6ff943 Mon Sep 17 00:00:00 2001
From: Vit Mojzis <vmojzis@redhat.com>
Date: Thu, 24 Jul 2025 13:36:35 +0200
Subject: [PATCH] selinux-autorelabel: Improve comments

The original comment of relabel_selinux() no longer applies. The system
is restarted either way.

Resolves: RHEL-93949
---
 selinux-autorelabel | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/selinux-autorelabel b/selinux-autorelabel
index 5290c8c..1ce0e87 100755
--- a/selinux-autorelabel
+++ b/selinux-autorelabel
@@ -30,8 +30,9 @@ efi_set_boot_next() {
 }
 
 relabel_selinux() {
-    # if /sbin/init is not labeled correctly this process is running in the
-    # wrong context, so a reboot will be required after relabel
+    # Switch SELinux to permissive mode, fix labeling issues (or execute shell
+    # and have the user fix them) and reboot the machine so that the correct
+    # labels are applied to all services.
     AUTORELABEL=
     . /etc/selinux/config
     echo "0" > /sys/fs/selinux/enforce