I need to make /etc/pki/CA/certs/cacert.pem have the same context as all the other files in /etc/pki: system_u:object_r:cert_t:s0
Tried restorecon -vR /etc/pki and semanage fcontext but the file remains in the unconfined_u:object_r:cert_t:s0 context.
system_u:object_r:cert_t:s0
wiki.libvirt.org/page/TLSCreateCACertmatchpathcon /etc/pki/CA/certs/cacert.pem
andsemanage fcontext -l | grep '^/etc/pki(/'
. Although I agree with Michael that what you have should be ok.[root@kvm ~]# matchpathcon /etc/pki/libvirt/private/kvm_server_privkey.pem system_u:object_r:cert_t:s0
-and-[root@kvm ~]# semanage fcontext -l | grep '^/etc/pki(/' /etc/pki(/.*)? all files system_u:object_r:cert_t:s0