How to label rootfs at the build time?

[Srinivasa Rao Ragolu]

Hi All,

I have ported selinux targeted policy (meta-selinux, yocto), to my embedded
platform. But, after first time boot only my rootfs is getting labeled. If
I would like to apply the policy or label my rootfs, what should I do?

Please suggest me the way to enforce policy and label rootfs at the build
time

Thanks,
Srinivas.

[Miroslav Grepl]

What is structure of this policy? Is this the same as we have with Targeted policy? Could you show us how it looks? Did you run relabel?

Regards,
Miroslav