https://bugzilla.suse.com/show_bug.cgi?id=1199520 https://bugzilla.suse.com/show_bug.cgi?id=1199520#c15 --- Comment #15 from Filippo Bonazzi <filippo.bonazzi@suse.com> --- This confirms that the issue is the system being mislabeled/unlabeled. You can see e.g. that the target context for /usr/bin/bash is unconfined_u:unconfined_r:unconfined_t:s0 (should be something like system_u:object_r:shell_exec_t:s0). The solution is to have the snapshot system properly set the labels on the filesystem (using restorecon, or autorelabel, ...) before it is set to RO. I don't know how to do this, because this is entirely within the realm of the transactional server. -- You are receiving this mail because: You are on the CC list for the bug.