fn generate_transient_overlay_relabel(unit_dir: &Dir) -> Result<()>Expand description
Generate a oneshot service that relabels the transient overlay inode after SELinux policy loads, fixing the tmpfs_t label SELinux assigns to overlay upper-dir inodes at policy-load time.