https://bugzilla.suse.com/show_bug.cgi?id=1232527 https://bugzilla.suse.com/show_bug.cgi?id=1232527#c7 --- Comment #7 from Johannes Segitz <jsegitz@suse.com> --- I can get boot counting to work with the image and then adding a boot loader entry like this: cp /boot/efi/loader/entries/opensuse-microos-6.11.8-1-default-2.conf /boot/efi/loader/entries/opensuse-microos-6.11.8-1-default-2+3.conf the "+3" activates boot counting for me when I boot this entry, but even then I don't see the denial. For me the service starts fine. But in the end the denial you see makes sense and init should be able to manage files there. Please give the policy in https://build.opensuse.org/package/show/home:jsegitz:branches:security:SELin... a try transactional-update shell zypper ar -p 80 https://download.opensuse.org/repositories/home:/jsegitz:/branches:/security... zypper in --allow-vendor-change selinux-policy-targeted exit reboot -- You are receiving this mail because: You are on the CC list for the bug.