(In reply to Zdenek Kubala from comment #4) > I tried to reproduce snapper AVCs on clean MicroOS but so far without > success. See https://bugzilla.suse.com/show_bug.cgi?id=1224149#c5 You need to have snapshoes eligible for removal and of course you need to use LUKS encrypted root with TPM2 protection using systemd-pcrlock.