when the change is accepted and you install it, make sure that you do an autorelabel with: touch /etc/selinux/.autorelabel reboot and check with ps that tpm2-abrmd is running as system_u:system_r:tabrmd_t:s0: ps auxZ | grep tpm2-abrmd