Re: Setting context in early boot

Frederick Grose via selinux <[email protected]> Thu, 11 Dec 2025 14:30:54 -0000
Newsgroups gmane.linux.redhat.fedora.selinux
Message-ID <176546345437.1587013.2268780720774838671@mailman01.rdu3.fedoraproject.org>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